CVEs published in October 2017
1,342 vulnerabilities, 197 critical, 6 exploited.
- cisco webex meetings serverA vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to...8.6 High
- cisco iosA vulnerability in conditional, verbose debug logging for the IPsec feature of Cisco IOS XE...4.4 Medium
- cisco unified contact center express, finesse +1 moreA vulnerability in the web-based management interface of Cisco Unified Contact Center Express...6.1 Medium
- cisco expressway, telepresence video communication server, telepresence conductor +2 moreA vulnerability in the cluster database (CDB) management component of Cisco Expressway Series...4.3 Medium
- cisco jabber, webex meeting center +1 moreA vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker...5.5 Medium
- cisco network analysis module, prime network analysis module +1 moreA vulnerability in the web interface of Cisco Network Analysis Module Software could allow an...5.3 Medium
- cisco jabberA vulnerability in the web interface of Cisco Jabber for Windows Client could allow an...5.5 Medium
- cisco ios xeA vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated...6.1 Medium
- cisco spa300 firmware, spa500 firmware +1 moreA vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated,...8.8 High
- cisco spa 501g firmware, spa 502g firmware, spa 504g firmware +5 more +7 moreA vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco...7.5 High
- cisco small business ip phone firmwareA vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco...7.5 High
- cisco cloud services platform 2100A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an...9.9 Critical
- linux kernelnet/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges...7.8 High
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...7.5 High
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...6.2 Medium
- oracle jrockit, oracle corporation java, debian linux +28 more +30 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS)...5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP)....5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization)....5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot...9.6 Critical
- oracle jrockit, oracle corporation java, debian linux +28 more +30 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...3.1 Low
- oracle jrockit, oracle corporation java, debian linux +28 more +30 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...4.0 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +27 more +29 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)....9.6 Critical
- oracle jrockit, oracle corporation java, debian linux +28 more +30 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...5.3 Medium
- oracle corporation java, debian linux, netapp active iq unified manager +26 more +28 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). Supported...6.8 Medium
- redhat libvirt, debian linux +1 morelibvirt version 2.3.0 and later is vulnerable to a bad default configuration of "verify-peer=no"...8.1 High
- gnu libextractorIn GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the...7.5 High
- gnu libextractorIn GNU Libextractor 1.4, there is a heap-based buffer overflow in the...7.5 High
- gnu libextractorIn GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTOR_nsf_extract_method...7.5 High
webminMageiaUpdated webmin packages fix security vulnerabilityNo score- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 moreAdobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure,...8.8 High
- web2pyOpen redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows remote attackers to...6.1 Medium
- golang go, fedoraproject fedora, redhat enterprise linux server +3 more +5 moreThe net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP...9.8 Critical
- golang go, fedoraproject fedora, redhat enterprise linux server +3 more +5 moreThe net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP...9.8 Critical
- gsi-office winpat portalSQL injection vulnerability in the login form in GSI WiNPAT Portal 3.2.0.1001 through 3.6.1.0...9.8 Critical
- inboundnow wordpress landing pagesThe Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary...8.8 High
- 3cxIn the 3CX Phone System 15.5.3554.1, the Management Console typically listens to port 5001 and is...6.5 Medium
- alienvault unified security managementAlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting...5.7 Medium
- interspire email marketerThe function in charge to check whether the user is already logged in init.php in Interspire...9.8 Critical
- puppet agent, enterprise +1 morePuppet Enterprise 2015.3.3 and 2016.x before 2016.4.0, and Puppet Agent 1.3.6 through 1.7.0 allow...7.2 High
- realtyna property listingCross-site request forgery (CSRF) vulnerability in the Realtyna RPL (com_rpl) component before 8...8.8 High
- realtyna property listingMultiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before 8.9.5 for...7.2 High
- google chrome, uclouvain openjpeg, debian linux +2 moreDouble free vulnerability in the j2k_read_ppm_v3 function in OpenJPEG before r2997, as used in...6.5 Medium
- pulpproject qpidThe Qpid server on Red Hat Satellite 6 does not properly restrict message types, which allows...7.2 High
- emc networkerAn issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior...8.1 High
- zfsonlinux zfssharenfs 0.6.4, when built with commits bcdd594 and 7d08880 from the zfs repository, provides...4.3 Medium
- lightbend play framework, netty +1 moreInformation Exposure in Netty7.5 High
- codeasily grand flagalleryThe Grand Flagallery plugin before 4.25 for WordPress allows remote attackers to obtain the...5.3 Medium
- Show moreLoading…