CVEs published in October 2017
1,342 vulnerabilities, 197 critical, 6 exploited.
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- irfanview pdfIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView 4.44 - 32bit with PDF plugin version 4.43 allows attackers to cause a denial of service...7.8 High
- atlassian fisheye and crucible, crucible, fisheye +2 moreVarious resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers...6.1 Medium
- atlassian fisheye and crucible, crucible, fisheye +2 moreThe administration user deletion resource in Atlassian Fisheye and Crucible before version 4.4.2...5.4 Medium
- gnu libextractorIn GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c.7.5 High
- gnu libextractorIn GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in...5.5 Medium
- flexense vx searchFlexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST...9.8 Critical
- seagate blackarmor nas 220 firmwareSeagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute...9.8 Critical
- purestorage purityStored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote...5.4 Medium
- graphicsmagick, debian linux +1 moreReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26 has a use-after-free issue when the...8.8 High
- tiandy ip camera firmwareTiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which...7.5 High
- horde groupwareThe File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to...7.5 High
- intel nuc7i3bnh firmware, nuc7i3bnk firmware, nuc7i5bnh firmware +3 more +5 moreIncorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK,...7.5 High
- intel nuc7i3bnh firmware, nuc7i3bnk firmware, nuc7i5bnh firmware +3 more +5 moreInsufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK,...7.5 High
- intel nuc7i3bnh firmware, nuc7i3bnk firmware, nuc7i5bnh firmware +3 more +5 moreInsecure platform configuration in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK,...7.1 High
- intel nuc7i3bnh firmware, nuc7i3bnk firmware, nuc7i5bnh firmware +3 more +5 moreInsufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH,...8.4 High
- canonical ubuntu linux, cisco systems, inc. simple direct media, debian linux +1 more +3 moreAn exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5...8.8 High
- linux kernelsecurity/keys/keyctl.c in the Linux kernel before 4.11.5 does not consider the case of a NULL...5.5 Medium
- linux kernelThe keyctl_read_key function in security/keys/keyctl.c in the Key Management subcomponent in the...5.5 Medium
- linux kernelarch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does...7.8 High
- hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 moreRubyGems vulnerable to Deserialization of Untrusted Data9.8 Critical
- zyxel nbg6716 firmwareZyxel NBG6716 V1.00(AAKG.9)C0 devices allow command injection in the ozkerz component because...9.8 Critical
- gnu binutils_bfd_dwarf2_cleanup_debug_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka...5.5 Medium
- hp operations orchestration, micro focus hpe operations orchestration +1 moreA input validation vulnerability in HPE Operations Orchestration product all versions prior to 10...9.8 Critical
- ibm financial transaction managerIBM Financial Transaction Manager for ACH Services for Multi-Platform 3.0.2 could allow an...6.5 Medium
- dotcmsThe dotCMS 4.1.1 application is vulnerable to Stored Cross-Site Scripting (XSS) affecting a...5.4 Medium
- wiresharkIn Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the BT ATT dissector could crash. This was...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.4.0 to 2.4.1, 2.2.0 to 2.2.9, and 2.0.0 to 2.0.15, the DMP dissector could crash....7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.1, the RTSP dissector could crash. This was addressed in epan...7.5 High
- wiresharkIn Wireshark 2.4.0 to 2.4.1, the DOCSIS dissector could go into an infinite loop. This was...7.5 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to HTTP response splitting...6.1 Medium
- Show moreLoading…