CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- dasinfomedia wpams apartment management systemMojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter.8.8 High
- dasinfomedia hospital management systemMojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter.8.8 High
- dasinfomedia wpchurch church management systemMojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter.8.8 High
- dasinfomedia wpgym gym management systemMojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter.8.8 High
- dasinfomedia school management systemMojoomla School Management System for WordPress allows SQL Injection via the id parameter.8.8 High
- dasinfomedia smsmaster multipurpose sms gatewayMojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter.8.8 High
- dasinfomedia annual maintenance contract management systemMojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in...6.5 Medium
- teamworktec ticketplusTeamWork TicketPlus allows Arbitrary File Upload in updateProfile.8.8 High
- teamworktec photo fusionTeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.8.8 High
- teamworktec job linksTeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange.8.8 High
- freeipa** DISPUTED ** FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass...8.8 High
- vasco digipassCross-site scripting (XSS) vulnerability in the sample feedback.inc file in VASCO DIGIPASS...6.1 Medium
- google androidInteger overflow in IHDCP.cpp in the media_server component in Android allows remote attackers to...7.8 High
- google androidThe media_server component in Android allows remote attackers to cause a denial of service via a...5.5 Medium
- mapsplugin googlemapsThe Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub...5.9 Medium
- zyxel c1000z firmware, fr1000z firmware, gs1900-24 firmware +22 more +24 moreZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P...5.9 Medium
- ibm datapower gateways, datapower gateway +1 moreIBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This...6.1 Medium
- ibm websphere portalIBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories...7.5 High
- ibm security identity manager, security identity governance and intelligence, security privileged identity manager +2 moreIBM Security Identity Manager Adapters 6.0 and 7.0 does not perform an authentication check for a...8.6 High
- libbpg project libbpgThe hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a...8.8 High
- libbpg project libbpgThe hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a...8.8 High
- 2kblater 2kb amazon affiliates storeMultiple cross-site scripting (XSS) vulnerabilities in the 2kb Amazon Affiliates Store plugin...6.1 Medium
- opentext documentum webtop, documentum administrator +1 moreMultiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Webtop 6.8.0160...8.8 High
- opentext documentum administrator, documentum webtop +1 moreMultiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Administrator 7.2...8.8 High
- opentext documentum webtop, documentum administrator +1 moreMultiple open redirect vulnerabilities in OpenText Documentum Webtop 6.8.0160.0073 allow remote...6.1 Medium
- opentext documentum administrator, documentum webtop +1 moreMultiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow...6.1 Medium
- ibm security identity manager, security identity governance and intelligence, security privileged identity manager +2 moreIBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated...8.8 High
- perlStack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24...9.8 Critical
- apple iphone os, tvos, broadcom bcm4355c0 firmware +2 moreOn Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious...9.8 Critical
- apple iphone os, tvos, broadcom bcm4355c0 firmware +2 moreOn Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a...9.8 Critical
- manageengine desktop centralThe FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote...9.8 Critical
- octobercms octoberCross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote...5.4 Medium
- inpsyde backwpupVulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup...7.5 High
- laravelLaravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior5.9 Medium
- apache commons jellyImproper Restriction of XML External Entity Reference in Jelly9.8 Critical
- zte nr8000 series, nr8000tr firmware, nr8120 firmware +4 more +6 moreAll versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A,...9.8 Critical
- symantec corporation norton remove & reinstall, norton remove \& reinstall +1 moreNorton Remove & Reinstall can be susceptible to a DLL preloading vulnerability. These types of...7.0 High
- usb-creator project usb-creatorusb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14...7.8 High
- man-db project man-dbThe daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows...7.8 High
- ffmpegThe sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before 3.3.4...8.8 High
- saadamin simple student resultThe Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass...7.5 High
- genixcmsGeniXCMS Cross-site Scripting (XSS) via the Menu ID field6.1 Medium
- genixcmsGeniXCMS arbitrary PHP code execution8.8 High
- genixcmsGeniXCMS arbitrary PHP code execution8.8 High
- genixcmsGeniXCMS Cross-site Scripting (XSS) via id parameter6.1 Medium
- genixcmsGeniXCMS Cross-site Scripting (XSS) vulnerability via id parameter6.1 Medium
- eventespresso event espresso liteSQL Injection exists in /includes/event-management/index.php in the event-espresso-free (aka...9.8 Critical
- eyesofnetworkCross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0...5.4 Medium
debsecanDebiandebsecan - updateNo score- intensewp wp jobsThe Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field.6.1 Medium
- Show moreLoading…