CVEs published in September 2017
1,249 vulnerabilities, 250 critical, 14 exploited.
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe content security policy (CSP) "sandbox" directive did not create a unique origin for the...5.4 Medium
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA use-after-free vulnerability can occur in design mode when image objects are resized if objects...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreA use-after-free vulnerability can occur when manipulating arrays of Accessible Rich Internet...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreFile downloads encoded with "blob:" and "data:" URL elements bypassed normal file download checks...7.8 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreMemory safety bugs were reported in Firefox 55 and Firefox ESR 52.3. Some of these bugs showed...9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDuring TLS 1.2 exchanges, handshake hashes are generated which point to a message buffer. This...7.5 High
- mozilla firefox, firefox esr, thunderbird +7 more +9 moreA use-after-free vulnerability can occur in the Fetch API when the worker or the associated...9.8 Critical
- freedesktop popplerIn Poppler 0.59.0, memory corruption occurs in a call to Object::dictLookup() in Object.h after a...7.5 High
- freedesktop poppler, debian linux +1 moreIn Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Configuration:...5.5 Medium
- freedesktop poppler, debian linux +1 moreIn Poppler 0.59.0, a NULL Pointer Dereference exists in AnnotRichMedia::Content::Content in Annot...5.5 Medium
ffmpegSUSE,lameSUSE,SDL2SUSE +1 more +3 moreSecurity update for fmpegNo score- apache mesosUse after free in Apache Mesos7.5 High
- apache mesosDenial of service in Apache Mesos7.5 High
- redhat mobile application platformIt was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user....6.1 Medium
- redhat mobile application platformThe external_request api call in App Studio (millicore) allows server side request forgery (SSRF)...6.3 Medium
- redhat mobile application platformA flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x...9.8 Critical
- elastic x-pack alerting, x-pack +1 moreAn error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users...8.8 High
- elastic x-pack security, x-pack +1 moreAn error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement. If a user has...6.5 Medium
- elastic cloud enterpriseThe client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt...5.9 Medium
- shindiristudio content timelineMultiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow...9.8 Critical
- elastic kibanaKibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that...6.1 Medium
- sap enterprise portalCross site scripting (XSS) vulnerability in SAP Enterprise Portal 7.50 allows remote attackers to...6.1 Medium
- percona toolkit, xtrabackup +1 moreThe version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was...5.9 Medium
- percona toolkitThe automatic version check functionality in the tools in Percona Toolkit 2.1 allows man-in-the...8.1 High
- exiv2There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A...5.5 Medium
- exiv2There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv2 0.26....5.5 Medium
- exiv2A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in...5.5 Medium
- exiv2There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image...5.5 Medium
- exiv2There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image...5.5 Medium
- exiv2There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A...5.5 Medium
- exiv2In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a...5.5 Medium
- cisco ios, ios and ios xe software +1 moreThe DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a...9.8 Critical
- cisco ios xeA vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation...6.8 Medium
- cisco catalyst 6800 series switches, ios +1 moreA vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for...6.5 Medium
- cisco ios, ios xe, ios and ios xe software +2 moreA vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through...7.5 High
- cisco ios xeA vulnerability in the implementation of the Locator/ID Separation Protocol (LISP) in Cisco IOS...9.8 Critical
- cisco ios, ios software +1 moreA vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN...7.5 High
- cisco ios, ios software +1 moreMultiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in...7.5 High
- cisco ios, ios software +1 moreMultiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in...7.5 High
- cisco ios, ios software +1 moreA vulnerability in the implementation of a protocol in Cisco Integrated Services Routers...6.5 Medium
- cisco ios, ios software +1 moreA vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco...7.5 High
- cisco ios xeA vulnerability in the web-based user interface (web UI) of Cisco IOS XE 16.2 could allow an...8.8 High
- cisco ios xeA vulnerability in the REST API of the web-based user interface (web UI) of Cisco IOS XE 3.1...9.8 Critical
- cisco ios, ios xe +1 moreA vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and...5.9 Medium
- cisco ios xeA vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for Cisco 5760...8.8 High
- cisco ios xeA vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated...6.5 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreAn Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0...5.5 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreAn Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in...5.5 Medium
- exiv2, canonical ubuntu linux, debian linux +2 moreAn Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp...5.5 Medium
- nodejs node.jsNode.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change...7.5 High
- Show moreLoading…