CVEs published in October 2017
1,342 vulnerabilities, 197 critical, 6 exploited.
- busyboxarchival/libarchive/decompress_unlzma.c in BusyBox 1.27.2 has an Integer Underflow that leads to...5.5 Medium
- phpwcmsphpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmpl.php and include/inc_tmpl/admin...4.8 Medium
- serialize-to-js project serialize-to-js** DISPUTED ** The deserialize function in serialize-to-js through 1.1.1 allows attackers to...7.5 High
- user-login-history project user-login-historyMultiple cross-site scripting (XSS) vulnerabilities in the user-login-history plugin through 1.5...6.1 Medium
- wp no external links project no external linksCross Site Scripting (XSS) exists in the wp-noexternallinks plugin before 3.5.19 for WordPress...6.1 Medium
- redislabs redisnetworking.c in Redis before 3.2.7 allows "Cross Protocol Scripting" because it lacks a check for...7.4 High
- argosoft mini mail serverDenial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote...5.3 Medium
- nftp project nftpBuffer Overflow vulnerability in Ayukov NFTPD 2.0 and earlier allows remote attackers to execute...9.8 Critical
- ffmpegDouble free vulnerability in FFmpeg 3.3.4 and earlier allows remote attackers to cause a denial...6.5 Medium
- saltstack saltSaltStack Salt Denial of Service via a crafted authentication request7.5 High
- saltstack saltSaltStack Salt Directory traversal vulnerability in minion id validation9.8 Critical
- cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 moreCloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF)...8.8 High
- cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 moreCloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password9.8 Critical
- cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 moreCloud Foundry Runtime Insufficient Session Expiration vulnerability9.8 Critical
- cloudfoundry cf-release, pivotal software cloud foundry elastic runtime, cloud foundry uaa +2 moreCloud Foundry Runtime Cross-Site Request Forgery vulnerability8.8 High
- redhat jboss application server** DISPUTED ** The Embedded Jopr component in JBoss Application Server includes the cleartext...6.6 Medium
- eyouThe get_login_ip_config_file function in Eyou Mail System before 3.6 allows remote attackers to...9.8 Critical
- cisco webex meetings serverCisco WebEx Meetings Server before 1.1 uses meeting IDs with insufficient entropy, which makes it...7.3 High
- phpsugar php melodyIn PHPSUGAR PHP Melody CMS 2.6.1, SQL Injection exists via the playlist parameter to playlists.php.9.8 Critical
recodeMageiaUpdated recode packages fix security vulnerabilityNo score- apache portable runtime utility, apache software foundation portable runtime +1 moreApache Portable Runtime Utility (APR-util) 1.6.0 and prior fail to validate the integrity of SDBM...4.7 Medium
- apache portable runtime, debian linux, redhat enterprise linux desktop +8 more +10 moreWhen apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field...7.1 High
- busybox, canonical ubuntu linux, debian linux +2 moreThe get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an...5.5 Medium
- symantec endpoint encryptionIn Symantec Endpoint Encryption before SEE 11.1.3HF3, a kernel memory leak is a type of resource...5.7 Medium
- symantec encryption desktopIn Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of...5.7 Medium
- tp-link wr940n firmwareMultiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4...8.8 High
- grupo msa vot.arThe parse function in MSA vot.Ar 3.1 does not check whether a candidate receives more than one...4.6 Medium
- count per day project per daySQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for...7.2 High
- strangerstudios paid memberships proMultiple cross-site scripting (XSS) vulnerabilities in the Paid Memberships Pro (PMPro) plugin...6.1 Medium
- axigen mail serverCross-site scripting (XSS) vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN...5.4 Medium
- watchguard hawkeye gMultiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow...8.8 High
- nodejs node.jsDirectory Traversal in st7.5 High
- node-printer project node-printerPotential Command Injection in printer9.8 Critical
- codem-transcode project codem-transcodePotential Command Injection in codem-transcode8.1 High
- letodms project letodmsSQL injection vulnerability in LetoDMS_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS)...9.8 Critical
- letodms project letodmsMultiple cross-site scripting (XSS) vulnerabilities in out/out.UsrMgr.php in LetoDMS (formerly...6.1 Medium
- letodms project letodmsMultiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3...8.8 High
- letodms project letodmsMultiple cross-site scripting (XSS) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8...6.1 Medium
- labwiki project labwikiedit.php in LabWiki 1.1 and earlier does not properly verify uploaded user files, which allows...8.8 High
- scilico labwikiMultiple cross-site scripting (XSS) vulnerabilities in LabWiki 1.1 and earlier allow remote...6.1 Medium
- rkkda foo2zjsfoo2zjs before 20110722dfsg-3ubuntu1 as packaged in Ubuntu, 20110722dfsg-1 as packaged in Debian...5.5 Medium
- reseed project reseedreseed seeds random numbers from an insecure HTTP request to random.org during installation,...5.9 Medium
- easy-appointments easy appointmentsThe Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the...6.1 Medium
- pootlepress pootle buttonThe Pootle Button plugin before 1.2.0 for WordPress has XSS via the assets_url parameter in...5.4 Medium
- popcash popcash.net code integration toolThe PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab...6.1 Medium
- phpmyfaqIn phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag.6.1 Medium
- phpmyfaqIn phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php.8.8 High
- apache derbyImproper Access Control in Apache Derby7.5 High
- cisco small business sa520 firmware, small business sa540 firmware +1 moreCisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory...7.5 High
- logitech media serverDOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5,...6.1 Medium
- Show moreLoading…