Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2017
October

CVEs published in October 2017

1,342 vulnerabilities, 197 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached)....CVE-2017-10314Fix available4.9 MediumOctober 18, 2017
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Group Replication GCS)...CVE-2017-10313Fix available4.9 MediumOctober 18, 2017
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS)....CVE-2017-10311Fix available4.9 MediumOctober 18, 2017
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-10294Fix available4.9 MediumOctober 18, 2017
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance...CVE-2017-10283Fix available5.3 MediumOctober 18, 2017
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS)....CVE-2017-10276Fix available6.5 MediumOctober 18, 2017
oracle mysql, oracle corporation mysql server, debian linux +15 more +17 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2017-10268Fix available4.1 MediumOctober 18, 2017
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-10227Fix available4.9 MediumOctober 18, 2017
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-10167Fix available6.5 MediumOctober 18, 2017
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2017-10165Fix available4.9 MediumOctober 18, 2017
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth...CVE-2017-10155Fix available7.5 HighOctober 18, 2017
envitech envidas ultimateAn Improper Authentication issue was discovered in Envitech EnviDAS Ultimate Versions prior to v1...CVE-2017-96258.2 HighOctober 17, 2017
prominent multiflex m10a controller firmwareA Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX...CVE-2017-140135.6 MediumOctober 17, 2017
prominent multiflex m10a controller firmwareA Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web...CVE-2017-140118.8 HighOctober 17, 2017
prominent multiflex m10a controller firmwareAn Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface...CVE-2017-140096.5 MediumOctober 17, 2017
prominent multiflex m10a controller firmwareAn Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller...CVE-2017-140075.6 MediumOctober 17, 2017
prominent multiflex m10a controller firmwareAn Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web...CVE-2017-140058.8 HighOctober 17, 2017
we-con levi studio hmi editorA Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and...CVE-2017-139999.8 CriticalOctober 17, 2017
zorovavi\/blog project zorovavi\/blogSQL Injection exists in zorovavi/blog through 2017-10-17 via the id parameter to recept.php.CVE-2017-155399.8 CriticalOctober 17, 2017
nvidia adsp firmware, nvidia corporation jetson +1 moreNVIDIA ADSP Firmware contains a vulnerability in the ADSP Loader component where there is the...CVE-2017-62737.8 HighOctober 17, 2017
tibco managed file transfer command center, managed file transfer internet server +1 moreDeployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO...CVE-2017-55318.0 HighOctober 17, 2017
lenovo service framework, lenovo group ltd. service framework application +1 moreThe Lenovo Service Framework Android application executes some system commands without proper...CVE-2017-37619.8 CriticalOctober 17, 2017
lenovo service framework, lenovo group ltd. service framework application +1 moreThe Lenovo Service Framework Android application uses a set of nonsecure credentials when...CVE-2017-37608.1 HighOctober 17, 2017
lenovo service framework, lenovo group ltd. service framework application +1 moreThe Lenovo Service Framework Android application accepts some responses from the server without...CVE-2017-37598.1 HighOctober 17, 2017
lenovo service framework, lenovo group ltd. service framework application +1 moreImproper access controls on several Android components in the Lenovo Service Framework...CVE-2017-37589.8 CriticalOctober 17, 2017
iliasStored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5...CVE-2017-155385.4 MediumOctober 17, 2017
debian ftpsyncDebian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote...CVE-2017-8805Fix available9.1 CriticalOctober 17, 2017
form manager project managerEval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form...CVE-2015-78069.8 CriticalOctober 17, 2017
dasanzhone znid 2426a firmwareThe web administrative portal in Zhone zNID GPON 2426A before S3.0.501 allows remote attackers to...CVE-2014-9118Public exploitEPSS 53.4%8.8 HighOctober 17, 2017
dasanzhone znid 2426a firmwarebackupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501...CVE-2014-8357Public exploit8.8 HighOctober 17, 2017
x2engine x2crmUnrestricted file upload vulnerability in the ProfileController::actionUploadPhoto method in...CVE-2014-26648.8 HighOctober 17, 2017
nwjs nw.jsnw.js before 0.11.5 can simulate user input events in a normal frame, which allows remote...CVE-2014-97339.8 CriticalOctober 17, 2017
huawei usg9520 firmware, usg9560 firmware, usg9580 firmware +2 moreHuawei USG9560/9520/9580 before V300R001C01SPC300 allows remote attackers to cause a memory leak...CVE-2014-96977.5 HighOctober 17, 2017
flowpaper flexpaperFlexPaperViewer.swf in Flexpaper before 2.3.1 allows remote attackers to conduct content-spoofing...CVE-2014-96786.1 MediumOctober 17, 2017
flowpaper flexpaperCross-site scripting (XSS) vulnerability in FlexPaperViewer.swf in Flexpaper before 2.3.1 allows...CVE-2014-96776.1 MediumOctober 17, 2017
gollum project gollum, gollum-lib, grit adapter +2 moregollum and gollum-lib allow remote authenticated users to execute arbitrary codeCVE-2014-9489Fix available8.8 HighOctober 17, 2017
mediawikiThe getid3 library in MediaWiki before 1.24.1, 1.23.8, 1.22.15 and 1.19.23 allows remote...CVE-2014-94879.8 CriticalOctober 17, 2017
wi-fi alliance protected access (wpa and wpa2), canonical ubuntu linux, debian linux +10 more +12 moreWi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL)...CVE-2017-130846.8 MediumOctober 17, 2017
xerces-j2 SUSESecurity update for xerces-j2SUSE-SU-2017:2744-1Fix availableNo scoreOctober 17, 2017
xerces-j2 SUSESecurity update for xerces-j2SUSE-SU-2017:2749-1Fix availableNo scoreOctober 17, 2017
freedesktop poppler, debian linux +1 moreIn Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine()...CVE-2017-15565Fix available8.8 HighOctober 17, 2017
linux kernelThe x86/fpu (Floating Point Unit) subsystem in the Linux kernel before 4.13.5, when a processor...CVE-2017-15537Fix available5.5 MediumOctober 17, 2017
radare radare2The store_versioninfo_gnu_verdef function in libr/bin/format/elf/elf.c in radare2 2.0.0 allows...CVE-2017-153857.8 HighOctober 16, 2017
blackberry workspaces server, workspaces appliance-x, workspaces vapp +2 moreAn information disclosure vulnerability in the BlackBerry Workspaces Server could result in an...CVE-2017-93687.5 HighOctober 16, 2017
blackberry workspaces server, workspaces appliance-x, workspaces vapp +2 moreA directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow...CVE-2017-93679.8 CriticalOctober 16, 2017
nvidia geforce experienceIn GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a...CVE-2017-03167.8 HighOctober 16, 2017
asx to mp3 converter project to mp3 converterASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related...CVE-2017-15221Public exploit7.8 HighOctober 16, 2017
openbsd opensmtpd, fedoraproject fedora +1 moreUse-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial...CVE-2015-7687Fix available9.8 CriticalOctober 16, 2017
arubanetworks clearpass policy managerAruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote...CVE-2015-46509.8 CriticalOctober 16, 2017
fedoraproject spin-kickstartsfedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle...CVE-2015-32295.9 MediumOctober 16, 2017
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open