CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- wordpressBefore version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip...7.5 High
- wordpressBefore version 4.8.2, WordPress was susceptible to a Cross-Site Scripting attack in the link...6.1 Medium
- cyberlink labelprintStack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute...7.8 High
- google chrome, debian linux +1 moreInappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for...8.8 High
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreInappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux,...8.8 High
- telaxius epesiIn EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.5.4 Medium
- telaxius epesiIn EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter.5.4 Medium
- telaxius epesiIn EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter.5.4 Medium
- telaxius epesiIn EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter.5.4 Medium
- telaxius epesiIn EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter.5.4 Medium
- telaxius epesiIn EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.5.4 Medium
- foxitsoftware foxit readerFoxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running...7.8 High
- denyall i-suite, web application firewall +1 moreDenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication...9.8 Critical
- denyall i-suite, web application firewall +1 moreDenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port 3001...8.1 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys...7.8 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for...5.5 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for...5.5 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys...7.8 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys...7.8 High
- trendmicro mobile securityProxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions...8.8 High
- trend micro mobile security (enterprise), trendmicro mobile security +1 moreAuthentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9...9.8 Critical
- trend micro mobile security (enterprise), trendmicro mobile security +1 moreUnrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3...8.8 High
- trend micro mobile security (enterprise), trendmicro mobile security +1 moreSQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7...9.8 Critical
- trend micro interscan web security virtual applianceVulnerability issues with the web service inspection of input parameters in Trend Micro Web...7.2 High
- trend micro smart protection server (standalone), trendmicro smart protection server +1 moreCommand injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2...8.8 High
- ca identity manager, identity manager virtual appliance +1 moreCA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially...9.8 Critical
- lenovo xclarity administrator, lenovo group ltd. xclarity administrator (lxca) +1 morePrivilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated...8.8 High
- lenovo xclarity administrator, lenovo group ltd. xclarity administrator (lxca) +1 moreAn attacker who obtains access to the location where the LXCA file system is stored may be able...6.7 Medium
- irfanviewIrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- stdutility stdu viewerSTDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- asp4cms aspcmsmember/Orderinfo.asp in ASP4CMS AspCMS 2.7.2 allows remote authenticated users to read arbitrary...6.5 Medium
- sam2p project sam2pIn sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp....9.8 Critical
- sam2p project sam2pBecause of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an...9.8 Critical
- artifex mupdfArtifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- artifex mupdfArtifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a...7.8 High
- artifex mupdfArtifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified...7.8 High
- dell emc vipr srm, emc m\&r, emc storage monitoring and reporting +1 more +3 moreIn EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Java...7.4 High
- dell emc vipr srm, emc m\&r, emc storage monitoring and reporting +1 more +3 moreIn EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Webservice...8.8 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value...7.8 High
- nvidia gpu display driver, gpu driver +1 moreNVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an...5.5 Medium
- nvidia gpu display driver, gpu driver +1 moreNVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where...5.5 Medium
- p3scan project p3scanThe daemon in P3Scan 3.0_rc1 and earlier creates a p3scan.pid file after dropping privileges to a...5.5 Medium
- zkteco zktime webZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a...7.5 High
- micro focus visibrokerAn out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. The...9.8 Critical
- micro focus visibrokerAn integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area,...9.8 Critical
- microfocus visibrokerAn integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability...7.5 High
- Show moreLoading…