CVEs published in October 2017
1,342 vulnerabilities, 197 critical, 6 exploited.
ca-certificatesUbuntuca-certificates updateNo score- solarwinds network performance monitorThe 'Upload logo from external path' function of SolarWinds Network Performance Monitor version...4.9 Medium
- solarwinds network performance monitorPersistent cross-site scripting (XSS) in the Add Node function of SolarWinds Network Performance...4.8 Medium
- nexusphp project nexusphpMultiple cross-site request forgery (CSRF) vulnerabilities in NexusPHP 1.5 allow remote attackers...6.1 Medium
- apache opennlpImproper Restriction of XML External Entity Reference in Apache OpenNLP9.8 Critical
- apache geodeApache Geode vulnerable to Exposure of Sensitive Information6.5 Medium
- apache wicketApache Wicket vulnerable to CSRF attacks8.8 High
- apache wicketApache Wicket allows attackers to check for third-party libraries5.3 Medium
- dell elastic cloud storageEMC Elastic Cloud Storage (ECS) before 3.1 is affected by an undocumented account vulnerability...9.8 Critical
- emc appsyncEMC AppSync host plug-in versions 3.5 and below (Windows platform only) includes a denial of...7.5 High
- openexr** DISPUTED ** Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers...5.5 Medium
- eyesofnetworkCross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0...5.4 Medium
- eyesofnetworkCross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0...5.4 Medium
- eyesofnetworkCross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0...4.8 Medium
- schneider-electric wonderware indusoft web studio, wonderware intouch +1 moreA Missing Authentication for Critical Function issue was discovered in Schneider Electric...9.8 Critical
- atutorCross-Site Scripting (XSS) was discovered in ATutor before 2.2.3. The vulnerability exists due to...5.4 Medium
- mozilla firefoxThe AES-GCM implementation in WebCrypto API accepts 0-length IV when it should require a length...5.3 Medium
- mozilla firefoxA vulnerability where WebExtensions can download and attempt to open a file of some non...9.8 Critical
- mozilla firefoxThe "instanceof" operator can bypass the Xray wrapper mechanism. When called on web content from...5.3 Medium
- mozilla firefoxWebExtensions could use popups and panels in the extension UI to load an "about:" privileged URL,...5.3 Medium
- mozilla firefoxOn pages containing an iframe, the "data:" protocol can be used to create a modal dialog through...5.3 Medium
- mozilla firefoxInside the JavaScript parser, a cast of an integer to a narrower type can result in data read...8.2 High
- mozilla firefoxIf web content on a page is dragged onto portions of the browser UI, such as the tab bar, links...5.3 Medium
- mozilla firefoxMemory safety bugs were reported in Firefox 55. Some of these bugs showed evidence of memory...9.8 Critical
- imagemagickA use-after-free in RenderFreetype in MagickCore/annotate.c in ImageMagick 7.0.7-4 Q16 allows...6.5 Medium
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +5 more +7 moreInteger underflow in the add_pseudoheader function in dnsmasq before 2.78 , when the --add-mac, -...7.5 High
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +3 more +5 moreMemory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is...7.5 High
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +4 more +6 morednsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive...5.9 Medium
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +4 more +6 moreStack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...9.8 Critical
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +3 more +5 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...9.8 Critical
- thekelleys dnsmasq, arista eos, arubanetworks arubaos +18 more +20 moreHeap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of...9.8 Critical
- thekelleys dnsmasq, canonical ubuntu linux, debian linux +5 more +7 moreIn dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size...7.5 High
- gnu binutilsThe *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as...5.5 Medium
- openvswitchIn lib/ofp-util.c in Open vSwitch (OvS) before 2.8.1, there are multiple memory leaks while...5.9 Medium
- pivotxlib.php in PivotX 2.3.11 does not properly block uploads of dangerous file types by admin users,...7.2 High
- blogotext project blogotextStored XSS vulnerability via a comment in inc/conv.php in BlogoText before 3.7.6 allows an...6.1 Medium
- checkmkCheck_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because...5.9 Medium
- jaspersoft jasperreportsJaspersoft JasperReports 4.7 suffers from a saved credential disclosure vulnerability, which...6.5 Medium
- freedesktop poppler, debian linux +1 moreThe FoFiTrueType::getCFFBlock function in FoFiTrueType.cc in Poppler 0.59.0 has a NULL pointer...7.5 High
- freedesktop poppler, debian linux +1 moreThe FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a heap-based...7.5 High
- freedesktop poppler, debian linux +1 moreThe FoFiType1C::convertToType0 function in FoFiType1C.cc in Poppler 0.59.0 has a NULL pointer...7.5 High
- linux kernelThe waitid implementation in kernel/exit.c in the Linux kernel through 4.13.4 accesses rusage...5.5 Medium