CVEs published in October 2017
1,342 vulnerabilities, 197 critical, 6 exploited.
- gnu glibcThe glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked...5.9 Medium
- tp-link tl-mr3220 firmwareCross-site scripting (XSS) vulnerability in the Wireless MAC Filtering page in TP-LINK TL-MR3220...6.1 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +9 more +11 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5...9.8 Critical
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 moreiControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and...7.3 High
- f5 networks, inc. big-ip pem, f5 big-ip policy enforcement manager +1 moreIn F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database...7.4 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip application acceleration manager +6 more +8 moreIn F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2,...5.9 Medium
- apache software foundation james, apache james server +1 moreApache James Privilege Escalation7.8 High
- pcuThe airbag detonation algorithm allows injury to passenger-car occupants via predictable Security...4.7 Medium
- panasonic kx-hjb1000 firmwareSQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50...8.8 High
- panasonic kx-hjb1000 firmwarePanasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an...7.5 High
- panasonic kx-hjb1000 firmwarePanasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an...5.3 Medium
- gnu glibcThe GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap...9.8 Critical
- paessler prtg network monitorPRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary...6.7 Medium
- musl-libc muslmusl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dns_parse_callback...7.5 High
- progea moviconAn Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and...6.7 Medium
- progea moviconAn Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and...7.8 High
- debian linux, linux kernel +1 moreA kernel data leak due to an out-of-bound read was found in the Linux kernel in...5.1 Medium
- phpsugar php melodyIn PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XSS via the page_title parameter.6.1 Medium
- fiberhome routerfiberhome firmwareOn FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in...7.5 High
- webminWebmin before 1.860 has XSS with resultant remote code execution. Under the 'Others/File Manager'...6.1 Medium
- webminCSRF exists in Webmin 1.850. By sending a GET request to at/create_job.cgi containing dir=/&cmd=...8.8 High
- webminSSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link.cgi, as demonstrated by a GET...8.6 High
- ikarussecurity ikarus antivirusAn active network attacker (MiTM) can achieve remote code execution on a machine that runs IKARUS...7.4 High
- zte zxdt22 sf01, zxdt22 sf01 firmware +1 moreAll versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product,...7.5 High
- wp-jobmanager job managerThe Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a...7.5 High
- huawei mate 7 firmwareThe TEEOS module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows...7.0 High
- huawei mate 7 firmwareThe tzdriver module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03...7.5 High
- mediawikiMediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not properly protect user block metadata,...4.9 Medium
- mediawikiMediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass...7.5 High
- mediawikiMediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not send a restrictive X-Frame-Options...6.5 Medium
- apache nifiInjection in Apache NiFi9.8 Critical
- apache nifiImproper Authentication In Apache NiFi7.5 High
- apache nifiCross-site Scripting in Apache NiFi5.4 Medium
- sound exchange project exchange, debian linux +1 moreIn lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free...5.5 Medium
- getmura mura cmstasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access...6.5 Medium
- dell emc data protection advisor** DISPUTED ** This vulnerability allows remote attackers to execute arbitrary code on vulnerable...8.8 High
- wordpressWordPress through 4.8.2 uses a weak MD5-based password hashing algorithm, which makes it easier...7.5 High
- oracle solaris clusterVulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent...7.3 High
- oracle trade managementVulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent:...8.2 High
- oracle trade managementVulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent:...8.2 High
- oracle trade managementVulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent:...8.2 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...5.0 Medium
- oracle retail xstore point of serviceVulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail...6.5 Medium
- oracle peoplesoft enterprise staffing front office, oracle corporation peoplesoft enterprise fin staffing front office +1 moreVulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products ...2.7 Low
- oracle hospitality simphonyVulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications ...5.4 Medium
- oracle mysql enterprise monitorVulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring...8.8 High
- oracle retail back officeVulnerability in the Oracle Retail Back Office component of Oracle Retail Applications ...5.4 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products ...5.9 Medium
- oracle hospitality suite8Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications ...6.5 Medium
- oracle hospitality suite8Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications ...6.4 Medium
- Show moreLoading…