CVEs published in October 2017
1,342 vulnerabilities, 197 critical, 6 exploited.
- cloudfoundry cf-release, pivotal routing-release +1 moreIn Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all...6.1 Medium
- graphicsmagick, debian linux +1 moreGraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory...6.5 Medium
- wso2 application server, business process server, business rules server +5 more +7 moreThe Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2...6.1 Medium
- graphicsmagick, debian linux +1 moreReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial...6.5 Medium
- apache impalaIn Apache Impala (incubating) before 2.10.0, a malicious user with "ALTER" permissions on an...6.5 Medium
- linux kernelThe sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users...5.5 Medium
- digium asterisk, certified asterisk +1 moreIn Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified...7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +55 more +57 moreUnrestricted Upload of File with Dangerous Type Apache Tomcat8.1 High
- dasinfomedia wphrm human resource management systemWPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id...8.8 High
- skyboxsecurity skybox manager client applicationSkybox Manager Client Application prior to 8.5.501 is prone to an elevation of privileges...7.8 High
- skyboxsecurity skybox manager client applicationSkybox Manager Client Application is prone to information disclosure via a username enumeration...3.3 Low
- skyboxsecurity skybox manager client applicationSkybox Manager Client Application prior to 8.5.501 is prone to an arbitrary file upload...5.5 Medium
- skyboxsecurity skybox manager client applicationSkybox Manager Client Application prior to 8.5.501 is prone to an information disclosure...5.5 Medium
- ipswitch imail serverStack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote...9.8 Critical
- ipswitch imail serverStack based buffer overflow in Ipswitch IMail server up to and including 12.5.5 allows remote...9.8 Critical
- gemalto sentinel ldk rteBuffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from HASP...7.5 High
- gemalto sentinel ldk rteStack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from...9.8 Critical
- gemalto sentinel ldk rteStack buffer overflow in hasplms in Gemalto ACC (Admin Control Center), all versions ranging from...9.8 Critical
- ibm websphere commerce, websphere commerce enterprise +1 moreIBM WebSphere Commerce 7.0 and 8.0 contains an unspecified vulnerability in Marketing ESpot's...7.5 High
- ibm rational engineering lifecycle managerIBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm rational engineering lifecycle managerIBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm rational engineering lifecycle managerIBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm rational engineering lifecycle managerIBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm insights foundation for energyIBM Insights Foundation for Energy 2.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm rational engineering lifecycle managerIBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm rational engineering lifecycle managerIBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm rational engineering lifecycle managerIBM RELM 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ibm insights foundation for energyIBM Insights Foundation for Energy 2.0 is vulnerable to SQL injection. A remote attacker could...8.8 High
- ciphershed, idrix veracrypt, truecrypt +2 moreThe (1) IsVolumeAccessibleByCurrentUser and (2) MountDevice methods in Ntdriver.c in TrueCrypt 7...7.8 High
- ciphershed, idrix veracrypt, truecrypt +2 moreThe IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15,...7.8 High
- udesign project udesignCross-site scripting (XSS) vulnerability in the uDesign (aka U-Design) theme 2.3.0 before 2.7.10...6.1 Medium
openstack-glanceSUSE,openstack-glance-docSUSE +1 moreSecurity update for openstack-glanceNo score- compass rose project roseCross-site scripting (XSS) vulnerability in the Compass Rose module 6.x-1.x before 6.x-1.1 for...6.1 Medium
- huawei fusionserver ch121 v3, fusionserver ch220 v3, fusionserver ch222 v3 +7 more +9 moreThe management interface on Huawei FusionServer rack servers RH2288 V3 with software before...8.8 High
- huawei fusionserver ch121 v3, fusionserver ch220 v3, fusionserver ch222 v3 +7 more +9 moreThe login page of the server on Huawei FusionServer rack servers RH2288 V3 with software before...9.8 Critical
- lenovo system updateLenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to...7.8 High
- atlassian bambooBamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo...8.8 High
- lenovo fingerprint managerServices and files in Lenovo Fingerprint Manager before 8.01.42 have incorrect ACLs, which allows...6.7 Medium
- phpcollabUnrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier...8.8 High
- phpcollabSQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute...9.8 Critical
- wordpress, debian linux +1 moreWordPress 4.8.2 stores cleartext wp_signups.activation_key values (but stores the analogous...6.5 Medium
- gxlcmsGxlcms uses an unsafe character-replacement approach in an attempt to restrict access, which...7.5 High
- opentext document sciences xpressionOpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 ...9.8 Critical
- opentext document sciences xpressionOpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 ...8.8 High
- opentext document sciences xpressionOpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 ...8.8 High
- opentext document sciences xpressionOpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 ...6.1 Medium
- opentext document sciences xpressionOpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 ...6.1 Medium
- opentext document sciences xpressionOpenText Document Sciences xPression (formerly EMC Document Sciences xPression) v4.5SP1 Patch 13 ...6.5 Medium
- ucopia wireless applianceThe chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote...8.2 High
- ucopia wireless applianceThe restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote...7.2 High
- Show moreLoading…