CVEs published in October 2017
1,342 vulnerabilities, 197 critical, 6 exploited.
- cisco meeting appA vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow...4.2 Medium
- cisco adaptive security appliance, adaptive security appliance software +1 moreA vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA)...6.1 Medium
- cisco meeting serverA vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an unauthenticated...5.3 Medium
- cisco license managerA vulnerability in the web interface of Cisco License Manager software could allow an...7.5 High
- cisco unified communications managerA vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an...6.1 Medium
- cisco webex meetings serverA vulnerability in the web framework of Cisco WebEx Meetings Server could allow an...6.1 Medium
- cisco wide area application servicesA vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS)...6.5 Medium
- cisco adaptive security appliance softwareA vulnerability in the implementation of the direct authentication feature in Cisco Adaptive...8.6 High
- cisco secure firewall management centerA vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense (FTD) Software could...8.6 High
- cisco secure firewall management centerA vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System...8.6 High
- imagemagick, canonical ubuntu linux +1 moreImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.7.5 High
- imagemagick, canonical ubuntu linux +1 moreImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.9.8 Critical
- x.org libxfontIn the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0...7.1 High
- x.org libxfontIn the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2...7.1 High
- fedoraproject sssd, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreIt was found that sssd's sysdb_search_user_by_upn_res() function before 1.16.0 did not sanitize...4.3 Medium
firefoxUbuntufirefox regressionNo score- red hat jboss application server, red hat, inc. jbossas, redhat jboss enterprise application platform +2 moreIn Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was...9.8 Critical
- saia burgess controls pcd controllers firmwareAn Information Exposure issue was discovered in Saia Burgess Controls PCD Controllers with PCD...5.3 Medium
- gnu binutilsdecode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as...5.5 Medium
- gnu binutilsfind_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd),...5.5 Medium
- gnu binutilsread_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as...5.5 Medium
- gnu binutilsdwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils...5.5 Medium
- gnu binutilsbfd_get_debug_link_info_1 in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd),...5.5 Medium
- gnu binutilsdwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils...7.8 High
- lame project lameLAME 3.99.5 has a NULL Pointer Dereference in the hip_decode_init function within libmp3lame...7.8 High
- lame project lameLAME 3.99.5, 3.99.4, 3.99.3, 3.99.2, 3.99.1, 3.99, 3.98.4, 3.98.2 and 3.98 have a heap-based...5.5 Medium
- ctekproducts skyrouter z4200 firmware, skyrouter z4400 firmware +1 moreAn Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all...9.4 Critical
- spidercontrol ininet webserverAn Improper Authentication issue was discovered in iniNet Solutions iniNet Webserver, all...10.0 Critical
- i-sens smartlog diabetes management softwareAn Uncontrolled Search Path or Element issue was discovered in i-SENS SmartLog Diabetes...7.8 High
- ininet solutions gmbh spidercontrol scada web server, spidercontrol scada webserver +1 moreAn Improper Privilege Management issue was discovered in SpiderControl SCADA Web Server Version 2...7.8 High
- frappe[ERPNext][Frappe Version <= 7.1.27] SQL injection vulnerability in frappe.share.get_users allows...8.8 High
- octobercms octoberOctober CMS PHP Code Execution7.2 High
- akka http serverImproper Restriction of Operations within the Bounds of a Memory Buffer in akka-http-core7.5 High
- jenkins datadogExposure of Sensitive Information in Jenkins Datadog plugin3.1 Low
- jenkins deployJenkins Deploy to container Plugin stored plain text passwords in job configuration5.5 Medium
- jenkins blue oceanImproper Authentication in Jenkins Blue Ocean Plugin4.3 Medium
- jenkins owasp dependency-checkPersistent XSS vulnerability in Jenkins OWASP Dependency-Check Plugin6.1 Medium
- jenkins pipeline-input-stepJenkins Pipeline: Input Step Plugin7.5 High
- jenkins script securitySandbox bypass in Jenkins Script Security Plugin sandbox bypass8.8 High
- jenkins blue oceanImproper Authentication in Jenkins Blue Ocean Plugin8.5 High
- jenkins blue oceanMissing Authorization in Jenkins Blue Ocean Plugin5.3 Medium
- jenkins config file providerImproper Privilege Management in Jenkins Config File Provider Plugin6.5 Medium
- jenkins dryPersistent XSS vulnerability in Jenkins DRY Plugin5.4 Medium
- jenkins static analysis utilitiesPersistent XSS vulnerability in Static Analysis Utilities5.4 Medium
- golang goThe net/http package's Request.ParseMultipartForm method starts writing to temporary files once...7.5 High
- golang goOn Darwin, user's trust preferences for root certificates were not honored. If the user had a...7.5 High
- jenkins pipeline\Arbitrary code execution due to incomplete sandbox protection in Jenkins Pipeline8.8 High
- jenkins script securityUnsafe methods in the default list of approved signatures in Jenkins Script Security Plugin6.5 Medium
- jenkins docker commonsJenkins Docker Commons Plugin allows any user with Overall/Read permission to get list of valid credentials IDs6.5 Medium
- jenkins poll scmJenkins Poll SCM Plugin vulnerable to Cross-Site Request Forgery8.8 High
- Show moreLoading…