CVEs published in October 2017
1,342 vulnerabilities, 197 critical, 6 exploited.
- mirasys video management systemMirasys Video Management System (VMS) 6.x before 6.4.6, 7.x before 7.5.15, and 8.x before 8.1.1...7.5 High
- wordpressWordPress through 4.8.2, when domain-based flashmediaelement.swf sandboxing is not used, allows...4.7 Medium
- bouqueteditor project bouqueteditorThere is XSS in the BouquetEditor WebPlugin for Dream Multimedia Dreambox devices, as...6.1 Medium
- qemuQemu through 2.10.0 allows remote attackers to cause a memory leak by triggering slow data...7.5 High
- silverstripeSilverstripe CMS User Enumeration5.3 Medium
- cisco pvc2300 firmware, rtp300 firmware, rv120w firmware +21 more +23 moreMultiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in...5.9 Medium
- hitachi solutions, ltd. hibun confidential file decryption program, hitachi-solutions confidential file decryption +1 moreUntrusted search path vulnerability in HIBUN Confidential File Decryption program prior to 10.50...7.8 High
- hitachi solutions, ltd. installer of hibun confidential file viewer, hitachi-solutions confidential file viewer +1 moreUntrusted search path vulnerability in Installer of HIBUN Confidential File Viewer prior to 11.20...7.8 High
- hitachi solutions, ltd. hibun confidential file decryption program, hitachi-solutions confidential file decryption +1 moreUntrusted search path vulnerability in HIBUN Confidential File Decryption program prior to 10.50...7.8 High
- really jwt-scalaInsufficient Data Verification in io.really:jwt-scala5.3 Medium
- cybozu office, cybozu, inc. cybozu office +1 moreCybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to...4.3 Medium
- atlassian bambooBamboo before 6.0.5, 6.1.x before 6.1.4, and 6.2.x before 6.2.1 had a REST endpoint that parsed a...8.8 High
- sqliteSQLite 3.20.1 has a NULL pointer dereference in tableColumnList in shell.c because it fails to...7.5 High
- qualiteam x-cartX-Cart 5.2.23, 5.3.1.9, 5.3.2.13, and 5.3.3 is vulnerable to Remote Code Execution. This...8.8 High
- octobercms octoberOctoberCMS Cross-Site Scripting5.4 Medium
- umbraco cmsUmbraco CMS XXE Vulnerability5.5 Medium
- umbraco cmsUmbraco CMS vulnerable to stored XSS5.4 Medium
- teampassTeamPass Cross-Site Scripting (XSS)5.4 Medium
- imagemagick, canonical ubuntu linux +1 moreReadPSDImage in coders/psd.c in ImageMagick 7.0.7-6 allows remote attackers to cause a denial of...8.8 High
- graphicsmagick, imagemagick +1 moreReadGIFImage in coders/gif.c in ImageMagick 7.0.6-1 and GraphicsMagick 1.3.26 leaves the palette...6.5 Medium
- linux kernelThe bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13...6.5 Medium
- the x.org foundation xorg-x11-server, x.org x server, debian linux +2 morexorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing...9.8 Critical
- the x.org foundation xorg-x11-server, x.org x server, debian linux +2 morexorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing...9.8 Critical
- x.org x server, debian linux +1 morexorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension...9.8 Critical
- the x.org foundation xorg-x11-server, x.org x server, debian linux +2 morexorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing...9.8 Critical
- the x.org foundation xorg-x11-server, x.org x server, debian linux +2 morexorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing...9.8 Critical
- the x.org foundation xorg-x11-server, x.org x server, debian linux +2 morexorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing...9.8 Critical
- the x.org foundation xorg-x11-server, x.org x server, debian linux +2 morexorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing...9.8 Critical
- the x.org foundation xorg-x11-server, x.org x server, debian linux +2 morexorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing...9.8 Critical
- the x.org foundation xorg-x11-server, x.org x server, debian linux +2 morexorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S...9.8 Critical
- the x.org foundation xorg-x11-server, x.org x server, debian linux +2 morexorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function...9.8 Critical
- the x.org foundation xorg-x11-server, x.org x server, debian linux +2 morexorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function...9.8 Critical
- the x.org foundation xorg-x11-server, x.org x server, debian linux +2 morexorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection...9.8 Critical
- hewlett packard enterprise hpe intelligent management center (imc) plat, hp intelligent management center plat +1 moreThe doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2...9.8 Critical
- hp loadrunner, performance center +1 moreHPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote...9.8 Critical
- emc archer grc platformRSA Archer GRC Platform prior to 6.2.0.5 is affected by an arbitrary file upload vulnerability. A...7.4 High
- emc smarts network configuration managerEMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x is affected by a...6.1 Medium
- emc archer grc platformRSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the...5.4 Medium
- rsa archer grc platformRSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting...6.1 Medium
- rsa archer grc platformRSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting via the...6.1 Medium
- rsa archer grc platformRSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the...5.4 Medium
- rsa archer grc platformRSA Archer GRC Platform prior to 6.2.0.5 is affected by a privilege escalation vulnerability. A...4.3 Medium
- lavalink ether-serial link firmwareAn Authentication Bypass by Spoofing issue was discovered in LAVA Ether-Serial Link (ESL) running...9.8 Critical
- cisco systems, inc. simple direct media, debian linux, libsdl sdl image +2 moreAn exploitable buffer overflow vulnerability exists in the XCF property handling functionality of...8.8 High
- irfanviewIrfanView version 4.44 (32bit) allows attackers to cause a denial of service or possibly have...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- irfanview, irfanview pdf +1 moreIrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of...7.8 High
- Show moreLoading…