CVEs published in October 2017
1,342 vulnerabilities, 197 critical, 6 exploited.
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can add an external link...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can remove attachments...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can remove automatic...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can edit tasks of a...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can add an internal link...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can download attachments...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can add automatic actions...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can remove categories...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can edit tags of a...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can add a new task to a...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can edit metadata of a...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can edit a category of a...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can add a new category to...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can remove columns from a...4.3 Medium
- kanboardIn Kanboard before 1.0.47, by altering form data, an authenticated user can edit swimlanes of a...4.3 Medium
- cactiinclude/global_session.php in Cacti 1.1.25 has XSS related to (1) the URI or (2) the refresh page.6.1 Medium
- eyesofnetworkA persistent (stored) XSS vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0...4.8 Medium
- libjpeg-turbolibjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-2 has a memory leak in ReadOneJNGImage in coders/png.c.6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-2 has a memory leak in ReadSGIImage in coders/sgi.c.6.5 Medium
- flexense syncbreezeBuffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified...9.8 Critical
- gridgainDirectory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x...6.5 Medium
- huawei ch121 v3 firmware, ch220 v3 firmware, ch222 v3 firmware +7 more +9 moreHuawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3...7.1 High
- apache rollerThe XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML...9.8 Critical
clamavMageiaUpdated clamav packages fix security vulnerabilityNo scorelibvirtSUSESecurity update for libvirtNo score- libmp3splt project libmp3spltplugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbis_block_clear function with...5.0 Medium
- identicard two-reader controller configuration managerIDenticard Two-Reader Controller Configuration Manager 1.18.8 (396) is vulnerable to Stored Cross...5.4 Medium
- infocus mondopadInFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by...7.5 High
- infocuscorp infocus mondopadInfocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The...5.5 Medium
- x.org x server, debian linux +1 moreIn X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to...7.8 High
- x.org x server, debian linux +1 moreIn X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X...4.7 Medium
- linux kernelOn Linux running on PowerPC hardware (Power8 or later) a user process can craft a signal frame...5.5 Medium
- qemuRace condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows...5.6 Medium
- wpeasycart wp easycartThe ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin...8.8 High
- phpbugtracker project phpbugtrackerMultiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.2...4.8 Medium
- phpbugtracker project phpbugtrackerMultiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote...9.8 Critical
- phpbugtracker project phpbugtrackerMultiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote...9.8 Critical
- phpbugtracker project phpbugtrackerMultiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0...4.8 Medium
- phpbugtracker project phpbugtrackerMultiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0...4.8 Medium
- phpbugtracker project phpbugtrackerMultiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1...8.8 High
- phpbugtracker project phpbugtrackerMultiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1...8.0 High
- http.rb project http.rbhttp vulnerable to Exposure of Sensitive Information to an Unauthorized Actor5.9 Medium
- cybelesoft thinfinity remote desktop workstationDirectory traversal vulnerability in Cybele Software Thinfinity Remote Desktop Workstation 3.0.0...7.5 High
- tug texliveThe pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and...4.7 Medium
- openkmCross-site scripting (XSS) vulnerability in OpenKM before 6.4.19 allows remote authenticated...5.4 Medium
- rapid7 metasploitThe web UI in Rapid7 Metasploit before 4.14.1-20170828 allows logout CSRF, aka R7-2017-22.6.5 Medium
- wpmudev smush image compression and optimizationThe Smush Image Compression and Optimization plugin before 2.7.6 for WordPress allows directory...7.5 High
- Show moreLoading…