Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2017
October

CVEs published in October 2017

1,342 vulnerabilities, 197 critical, 6 exploited.

Known exploitedIn KEVPublic exploitFix available

redhat cloudforms 3.0 management engineRed Hat CloudForms 3 Management Engine (CFME) allows remote authenticated users to cause a denial...CVE-2014-78136.5 MediumOctober 18, 2017
ms-ins sumaho, sumaho driving capability diagnosis +1 moreThe SumaHo application 3.0.0 and earlier for Android and the SumaHo "driving capability"...CVE-2014-72425.9 MediumOctober 18, 2017
keycloakJBoss Keycloak CSRF VulnerabilityCVE-2014-3709Fix available8.8 HighOctober 18, 2017
redhat enterprise mrgovirt-engine, as used in Red Hat MRG 3, allows man-in-the-middle attackers to spoof servers by...CVE-2014-37065.9 MediumOctober 18, 2017
theforeman foremanMultiple cross-site scripting (XSS) vulnerabilities in Foreman before 1.5.2 allow remote...CVE-2014-35315.4 MediumOctober 18, 2017
google androidcmds/servicemanager/service_manager.c in Android before commit...CVE-2014-31647.5 HighOctober 18, 2017
akeo rufusAkeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of...CVE-2017-130835.3 MediumOctober 18, 2017
emc isilon onefsEMC Isilon OneFS (versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6...CVE-2017-80246.1 MediumOctober 18, 2017
xenAn issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of...CVE-2017-15595Public exploitFix available8.8 HighOctober 18, 2017
xenAn issue was discovered in Xen through 4.9.x allowing x86 SVM PV guest OS users to cause a denial...CVE-2017-15594Fix available8.8 HighOctober 18, 2017
xenAn issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of...CVE-2017-15593Fix available6.5 MediumOctober 18, 2017
xenAn issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of...CVE-2017-15592Fix available8.8 HighOctober 18, 2017
xenAn issue was discovered in Xen 4.5.x through 4.9.x allowing attackers (who control a stub domain...CVE-2017-15591Fix available6.5 MediumOctober 18, 2017
xenAn issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of...CVE-2017-15590Fix available8.8 HighOctober 18, 2017
xenAn issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive...CVE-2017-15589Fix available6.5 MediumOctober 18, 2017
xenAn issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary...CVE-2017-15588Fix available7.8 HighOctober 18, 2017
artifex mupdfAn integer overflow was discovered in pdf_read_new_xref_section in pdf/pdf-xref.c in Artifex...CVE-2017-15587Fix available7.8 HighOctober 18, 2017
hitachienergy fox515t firmwareThe embedded web server on ABB Fox515T 1.0 devices is vulnerable to Local File Inclusion. It...CVE-2017-155836.5 MediumOctober 18, 2017
phpsugar php melodyIn PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a...CVE-2017-15579Public exploit9.8 CriticalOctober 18, 2017
phpsugar php melodyIn PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin...CVE-2017-15578Public exploit8.8 HighOctober 18, 2017
redmine, debian linux +1 moreRedmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows...CVE-2017-15577Fix available7.5 HighOctober 18, 2017
redmine, debian linux +1 moreRedmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views,...CVE-2017-15576Fix available7.5 HighOctober 18, 2017
redmine, debian linux +1 moreIn Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whether the...CVE-2017-15575Fix available7.3 HighOctober 18, 2017
redmine, debian linux +1 moreIn Redmine before 3.2.6 and 3.3.x before 3.3.3, stored XSS is possible by using an SVG document...CVE-2017-15574Fix available6.1 MediumOctober 18, 2017
redmine, debian linux +1 moreIn Redmine before 3.2.6 and 3.3.x before 3.3.3, XSS exists because markup is mishandled in wiki...CVE-2017-15573Fix available6.1 MediumOctober 18, 2017
redmine, debian linux +1 moreIn Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information...CVE-2017-15572Fix available7.5 HighOctober 18, 2017
redmine, debian linux +1 moreIn Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views...CVE-2017-15571Fix available6.1 MediumOctober 18, 2017
redmine, debian linux +1 moreIn Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views...CVE-2017-15570Fix available6.1 MediumOctober 18, 2017
redmine, debian linux +1 moreIn Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers...CVE-2017-15569Fix available6.1 MediumOctober 18, 2017
redmine, debian linux +1 moreIn Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers...CVE-2017-15568Fix available6.1 MediumOctober 18, 2017
redmineIn Redmine before 3.2.3, there are stored XSS vulnerabilities affecting Textile and Markdown text...CVE-2016-10515Fix available6.1 MediumOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7120Fix available8.8 HighOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7117Public exploitFix availableEPSS 10.2%8.8 HighOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7111Fix available8.8 HighOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7109Fix available6.1 MediumOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7107Fix available8.8 HighOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7104Fix available8.8 HighOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7102Fix available8.8 HighOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7100Fix available8.8 HighOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7098Fix available8.8 HighOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7096Fix available8.8 HighOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7095Fix available8.8 HighOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7093Fix available8.8 HighOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7092Public exploitFix available8.8 HighOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7091Fix available8.8 HighOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7090Fix available7.5 HighOctober 18, 2017
apple icloud, safari, iphone os +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7089Public exploitFix available6.1 MediumOctober 18, 2017
apple icloud, itunes, safari +2 more +4 moreAn issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...CVE-2017-7087Fix available8.8 HighOctober 18, 2017
oracle mysql, oracle corporation mysql server, debian linux +15 more +17 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2017-10378Fix available6.5 MediumOctober 18, 2017
oracle mysql, oracle corporation mysql server, mariadb +7 more +9 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB)....CVE-2017-10320Fix available4.9 MediumOctober 18, 2017
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open