CVEs published in October 2017
1,342 vulnerabilities, 197 critical, 6 exploited.
- berta cmsUnrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary...9.8 Critical
- theforeman foremanCross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman...5.4 Medium
- phpjabbers rate merate-me.php in Rate Me 1.0 has XSS via the id field in a rate action.6.1 Medium
- neroNero 7.10.1.0 has an unquoted BINARY_PATH_NAME for NBService, exploitable via a Trojan horse Nero...7.8 High
- infineon rsa library, trusted platform firmware +1 moreThe Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as...5.9 Medium
- sap host agentSAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP...7.5 High
- sap customer relationship managementThe Java component in SAP CRM has CSRF. This is SAP Security Note 2478964.8.8 High
- sap point of sale xpress serverXpress Server in SAP POS does not require authentication for read/write/delete file access. This...9.8 Critical
- sap customer relationship managementThe Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964.6.1 Medium
- sap point of sale xpress serverXpress Server in SAP POS does not require authentication for file read and erase operations,...9.8 Critical
- apache struts, netapp oncommand balance +1 moreApache Struts forced double OGNL evaluation8.8 High
- fiyo cmsFiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the ...9.8 Critical
- fiyo cmsFiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to...7.5 High
- store locator project locatorSQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows...9.8 Critical
- post highlights projects highlightsCross-site scripting (XSS) vulnerability in the post highlights plugin before 2.6.1 for WordPress...6.1 Medium
- ovirt, redhat ovirt-engine +1 moreoVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin,...7.5 High
- redhat edeployDirectory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary...9.1 Critical
- redhat subscription asset managerMultiple cross-site scripting (XSS) vulnerabilities in the SAM web application in Red Hat katello...6.1 Medium
- mobatek mobaxtermThe TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote...9.8 Critical
- wpjobboardMultiple client-side cross site scripting vulnerabilities have been discovered in the WpJobBoard...6.1 Medium
- shopwareShopware XSS Vulnerability6.1 Medium
- softwarepublico e-sicE-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php (aka the...9.8 Critical
- sound exchange project exchange, debian linux +1 moreThere is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in...5.5 Medium
- sound exchange project exchange, debian linux +1 moreThere is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound...5.5 Medium
- sound exchange project exchange, debian linux +1 moreThere is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange ...5.5 Medium
- artifex mupdfThe build_filter_chain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles...7.8 High
- radare radare2The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to...7.8 High
- osticketosTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a...6.1 Medium
- cpuid cpu-zIn CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation...7.8 High
- cpuid cpu-zIn CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver (e.g.,...7.8 High
- qemuThe mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged...6.0 Medium
- linux kernelRace condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to...7.0 High
- icu-project international components for unicodeDouble free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through...9.8 Critical
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity...5.3 Medium
- canonical ubuntu linux, debian linux, freebsd +9 more +11 moreWi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group...5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup ...6.8 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the...8.1 High
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the...5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK)...5.3 Medium
- wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK)...6.8 Medium
- ccsv project ccsvccsv Double Free vulnerability5.5 Medium
- luracast restlerLuracast Restler directory traversal vulnerability7.5 High
- paessler prtg network monitorPRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all...5.4 Medium
- ewbf cuda zcash minerThe miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP...5.3 Medium
- nexusphp project nexusphpXSS exists in NexusPHP 1.5 via the keyword parameter to messages.php.6.1 Medium
- airtame hdmi dongle firmware/bin/login.php in the Web Panel on the Airtame HDMI dongle with firmware before 3.0 allows an...9.8 Critical
- apache solr, canonical ubuntu linux, debian linux +1 more +3 moreRemote code execution occurs in Apache Solr9.8 Critical
- linux kernelThe KEYS subsystem in the Linux kernel through 4.13.7 mishandles use of add_key for a key that...5.5 Medium
- Show moreLoading…