CVEs published in October 2017
1,342 vulnerabilities, 197 critical, 6 exploited.
- jenkins gitCross-Site Request Forgery in Jenkins Git Plugin7.5 High
- jenkins github branch sourceJenkins GitHub Branch Source Plugin vulnerable to Cross-Site Request Forgery6.3 Medium
- jenkins role-based authorization strategyCSRF vulnerability in Jenkins Role-based Authorization Strategy Plugin configuration8.8 High
- jenkins pipeline\Jenkins Build Step Plugin fails to check Item/Build permission5.3 Medium
- jenkins sidebar linkPersisted XSS Vulnerability in Jenkins Sidebar Link Plugin5.4 Medium
- jenkins github branch sourceJenkins GitHub Branch Source Plugin allows any user with Overall/Read permission to get list of valid credentials IDs4.3 Medium
- jenkins periodic backupMissing permission checks in Jenkins Periodic Backup Plugin allow every user to change settings8.0 High
- jenkins subversionJenkins Subversion Plugin Cross-Site Request Forgery vulnerability6.5 Medium
- jenkins parameterized triggerParameterized Trigger Plugin fails to check Item/Build permission6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadOneMNGImage in coders...8.8 High
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in ReadEnhMetaFile in coders...8.8 High
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-0 Q16 has a NULL pointer dereference vulnerability in PDFDelegateMessage in...8.8 High
- apple iphone os, tvos, broadcom bcm4355c0 firmware +2 moreOn Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56, an attacker can trigger an information leak...7.5 High
- haxx libcurllibcurl may read outside of a heap allocated buffer when doing FTP. When libcurl connects to an...7.5 High
- google androidAn elevation of privilege vulnerability in the Motorola bootloader. Product: Android. Versions:...9.8 Critical
- google androidAn elevation of privilege vulnerability in the Huawei bootloader. Product: Android. Versions:...9.8 Critical
- google androidAn elevation of privilege vulnerability in the MediaTek soc driver. Product: Android. Versions:...7.8 High
- google androidAn elevation of privilege vulnerability in the HTC bootloader. Product: Android. Versions:...7.8 High
- google androidAn information disclosure vulnerability in the Broadcom wifi driver. Product: Android. Versions:...7.5 High
- google androidAn elevation of privilege vulnerability in the Broadcom wifi driver. Product: Android. Versions:...9.8 Critical
- google androidAn information disclosure vulnerability in the Android system (rild). Product: Android. Versions:...7.5 High
- google androidAn elevation of privilege vulnerability in the Android system (camera). Product: Android....9.8 Critical
- google androidA vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1...7.5 High
- google androidA vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1...7.5 High
- google androidA vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1...7.5 High
- google androidAn information disclosure vulnerability in the Android media framework (libstagefright). Product:...7.5 High
- google androidAn information disclosure vulnerability in the Android media framework (libeffects). Product:...5.5 Medium
- google androidAn information disclosure vulnerability in the Android media framework (libeffects). Product:...5.5 Medium
- google androidAn information disclosure vulnerability in the Android media framework (n/a). Product: Android....7.5 High
- google androidA denial of service vulnerability in the Android media framework (libstagefright). Product:...7.5 High
- google androidAn elevation of privilege vulnerability in the Android media framework (audio hal). Product:...7.8 High
- google androidA remote code execution vulnerability in the Android media framework (libhevc). Product: Android....7.8 High
- google androidA remote code execution vulnerability in the Android media framework (libmpeg2). Product: Android...7.8 High
- google androidA remote code execution vulnerability in the Android media framework (libstagefright). Product:...7.8 High
- google androidAn information disclosure vulnerability in the Android framework (file system). Product: Android....7.5 High
- google androidAn elevation of privilege vulnerability in the Android framework (ui framework). Product: Android...9.8 Critical
- google androidAn elevation of privilege vulnerability in the Android framework (gatekeeperresponse). Product:...7.8 High
- qtThe named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured...7.5 High
- openvpn, debian linux +1 moreOpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow...9.8 Critical
- ibm aixA flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java...7.3 High
- ibm integration bus, websphere message broker +1 moreIBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user...5.3 Medium
- salesforce tough-cookieRegular Expression Denial of Service in tough-cookie7.5 High
- paessler prtg network monitorPRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on...6.1 Medium
- paessler prtg network monitorPRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all...4.8 Medium
- gemalto gemalto's hasp srm, sentinel hasp and sentinel ldk products prior to sentinel ldk rte, sentinel ldk rte firmware +1 moreRemote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel...9.9 Critical
- gemalto gemalto's hasp srm, sentinel hasp and sentinel ldk products prior to sentinel ldk rte, sentinel ldk rte firmware +1 moreMemory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to...9.8 Critical
- gemalto gemalto's hasp srm, sentinel hasp and sentinel ldk products prior to sentinel ldk rte, sentinel ldk rte firmware +1 moreArbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and...7.5 High
- gemalto gemalto's hasp srm, sentinel hasp and sentinel ldk products prior to sentinel ldk rte, sentinel ldk rte firmware +1 moreRemote manipulations with language pack updater lead to NTLM-relay attack for system user in...9.8 Critical
- gemalto gemalto's hasp srm, sentinel hasp and sentinel ldk products prior to sentinel ldk rte, sentinel ldk rte firmware +1 moreStack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK...7.5 High
- cloudfoundry cf-release, pivotal capi-release +1 moreIn Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions...7.8 High
- Show moreLoading…