CVEs published in October 2017
1,342 vulnerabilities, 197 critical, 6 exploited.
- qnap music stationQNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8...9.8 Critical
- microfocus bi-directional driver, *** n/a *** idm 4.5 bidirectional edir driver version +1 moreThe Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log...5.3 Medium
- microfocus bi-directional driver, *** n/a *** idm 4.5 bidirectional edir driver version +1 moreThe Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service...7.5 High
- qnap helpdesk app, qts helpdesk +1 moreQNAP has already patched this vulnerability. This security concern allows a remote attacker to...7.5 High
- koji project kojiKoji blacklisted paths workaround7.5 High
- theforeman foremanThe LDAP Authentication functionality in Foreman might allow remote attackers with knowledge of...8.1 High
- libcsoap project libcsoapnanohttp in libcsoap allows remote attackers to cause a denial of service (NULL pointer...7.5 High
- google chromeHeap-based buffer overflow in Google Chrome before M40 allows remote attackers to cause a denial...5.5 Medium
- wolfsslCyaSSL does not check the key usage extension in leaf certificates, which allows remote attackers...5.9 Medium
- dockerDocker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp...7.8 High
- tech-banker gallery bankCross-site scripting (XSS) vulnerability in Best Gallery Albums Plugin before 3.0.70for WordPress...6.1 Medium
- cozmoslabs profile builderMultiple cross-site scripting (XSS) vulnerabilities in assets/misc/fallback-page.php in the...6.1 Medium
- formget easy contact form solutionCross-site scripting (XSS) vulnerability in the Easy Contact Form Solution plugin before 1.7 for...6.1 Medium
- intelliants subrionSubrion CMS CSRF Vulnerability8.8 High
- upxp_lx_elf.cpp in UPX 3.94 mishandles ELF headers, which allows remote attackers to cause a denial...7.8 High
- redislabs redisThe clusterLoadConfig function in cluster.c in Redis 4.0.2 allows attackers to cause a denial of...9.8 Critical
- lame project lameLAME 3.99.5, 3.99.4, 3.98.4, 3.98.2, 3.98 and 3.97 have a stack-based buffer overflow in...5.5 Medium
- lame project lameLAME 3.99, 3.99.1, 3.99.2, 3.99.3, 3.99.4, 3.99.5, 3.98.4, 3.98.2 and 3.98 has a heap-based...5.5 Medium
- myscada myproAn Unquoted Search Path issue was discovered in mySCADA myPRO Versions 7.0.26 and prior....7.8 High
- golang goAn unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. RFC 4954 requires...5.9 Medium
- golang go, debian linux, redhat developer tools +4 more +6 moreGo before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. Using custom...9.8 Critical
- loytec lvis-3me firmwareAn Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to...7.5 High
- loytec lvis-3me firmwareA Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The...8.8 High
- loytec lvis-3me firmwareA Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web...6.1 Medium
- loytec lvis-3me firmwareAn Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The...8.1 High
- ge intelligent platforms proficy hmi\/scada cimplicityA Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A...6.8 Medium
- computerinsel photoline, talos computerinsel photoline +1 moreAn memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel...8.8 High
- computerinsel photoline, talos computerinsel photoline +1 moreAn memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel...8.8 High
- computerinsel photoline, talos computerinsel photoline +1 moreA memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel...8.8 High
- ibm content navigatorIBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm tivoli storage manager, spectrum protect for virtual environments +1 moreIBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login...7.8 High
- ibm spectrum protect, tivoli storage manager +1 moreIBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption...4.4 Medium
- ibm spectrum protect, tivoli storage manager +1 moreIBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM...5.5 Medium
- ibm bigfix compliance analytics, bigfix security compliance analytics +1 moreIBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) stores user credentials in clear text...7.8 High
- ibm spectrum protect, tivoli storage manager +1 moreThe IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol...9.8 Critical
- hp ucmdb foundation softwareA remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11...6.1 Medium
- hp ucmdb foundation softwareA remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10...8.8 High
- trend micro officescanAn Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow...9.8 Critical
- trend micro officescan, trendmicro officescan xg +1 moreMemory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG...7.0 High
- trend micro officescanA Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker...7.5 High
- trend micro officescanPre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may...7.5 High
- trend micro officescanInformation disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow...5.3 Medium
- trend micro officescanA potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG...8.1 High
- trend micro officescanA vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can...7.5 High
- freebsdIn FreeBSD through 11.1, the smb_strdupin function in sys/netsmb/smb_subr.c has a race condition...8.1 High
- emtec pyrobatchftpEmTec PyroBatchFTP before 3.18 allows remote servers to cause a denial of service (application...7.5 High
- cisco ios xrA vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System ...7.5 High
- cisco sparkA vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated,...5.4 Medium
- cisco anyconnect secure mobility clientA vulnerability in the Network Access Manager (NAM) of Cisco AnyConnect Secure Mobility Client...6.5 Medium
- cisco wide area application services, virtual wide area application services +1 moreA vulnerability in the Independent Computing Architecture (ICA) accelerator feature for the Cisco...5.3 Medium
- Show moreLoading…