CVEs published in October 2017
1,342 vulnerabilities, 197 critical, 6 exploited.
- ibm bigfix platformIBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) uses insufficiently random numbers...5.3 Medium
- ibm bigfix platformIBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to...3.7 Low
- ibm bigfix platformIBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) generates an error message in error...4.3 Medium
- ibm bigfix platformIBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) stores sensitive information in URL...5.3 Medium
- ibm bigfix platformIBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) does not perform an authentication...6.5 Medium
- ibm bigfix platformIBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) discloses sensitive information to...5.3 Medium
- ndocsoftware ndocBefore Thornberry NDoc version 8.0, laptop clients and the server have default database (Cache)...9.8 Critical
- tapatalkMultiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5...9.8 Critical
- mediawikiMultiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.18.5 and 1.19.x before...6.1 Medium
- mediawikiCross-site scripting (XSS) vulnerability in MediaWiki before 1.18.5 and 1.19.x before 1.19.2...6.1 Medium
- apache ofbizApache OFBiz 10.04.x before 10.04.02 allows remote attackers to execute arbitrary code via...9.8 Critical
- beyondtrust remote supportThe agent in Bomgar Remote Support 15.2.x before 15.2.3, 16.1.x before 16.1.5, and 16.2.x before...7.8 High
- gnu libextractorIn GNU Libextractor 1.4, there is an out-of-bounds read in the EXTRACTOR_dvi_extract_method...5.5 Medium
- accesspressthemes ultimate-form-builder-liteThe ultimate-form-builder-lite plugin before 1.3.7 for WordPress has SQL Injection, with...9.8 Critical
- lenovo aio e95 firmware, thinkcentre m710s firmware, thinkcentre m710t firmware +1 more +3 moreSystem boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because...7.5 High
- paessler prtg network monitorIn Paessler PRTG Network Monitor 17.3.33.2830, it's possible to create a Map as a read-only user,...6.5 Medium
- igniterealtime openfireIgnite Realtime Openfire Server has Cross-site Scripting vulnerability in admin console4.8 Medium
- gluster glusterfsA flaw was found in GlusterFS in versions prior to 3.10. A null pointer dereference in...3.3 Low
- keycloakKeycloak Oauth Implementation Error7.2 High
- keycloak, redhat single sign on +1 moreKeycloak CSRF Vulnerability7.5 High
- keycloak, redhat single sign on +1 moreKeycloak Reflected XSS5.4 Medium
- gnu wget, debian linux +1 moreGNU Wget: heap overflow in HTTP protocol handling8.8 High
- gnu wget, debian linux +1 moreGNU Wget: stack overflow in HTTP protocol handling8.8 High
- fortinet fortimailA reflected Cross-Site Scripting (XSS) vulnerability in Fortinet FortiMail 5.1 and earlier, 5.2.0...6.1 Medium
- fortinet fortiwlcAn OS Command Injection vulnerability in Fortinet FortiWLC 6.1-2 through 6.1-5, 7.0-7 through 7.0...7.2 High
- fortinet fortiwlcA Cross-Site Scripting (XSS) vulnerability in Fortinet FortiWLC 6.1-x (6.1-2, 6.1-4 and 6.1-5); 7...5.4 Medium
- phpcollabSQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute...9.8 Critical
- londontrustmedia private internet accessThe London Trust Media Private Internet Access (PIA) application before 1.3.3.1 for Android...7.5 High
- dlink dgs-1500 firmwareD-Link DGS-1500 Ax devices before 2.51B021 have a hardcoded password, which allows remote...9.8 Critical
- systemd project systemd, canonical ubuntu linux +1 moreIn systemd 223 through 235, a remote DNS server can respond with a custom crafted DNS NSEC...7.5 High
- ibm rational collaborative lifecycle managementIBM Team Concert (RTC) is vulnerable to cross-site scripting. This vulnerability allows users to...5.4 Medium
- ibm rational collaborative lifecycle managementIBM RSA DM contains unspecified vulnerability in CLM Applications with potential for information...4.3 Medium
- ibm rational collaborative lifecycle managementAn unspecified vulnerability in IBM Jazz Foundation based applications might allow the display of...4.3 Medium
- ibm rational collaborative lifecycle managementIBM DOORS next Generation (DNG/RRC) is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm rational collaborative lifecycle managementIBM Jazz Foundation is vulnerable to cross-site scripting. This vulnerability allows users to...5.4 Medium
- advantech webopA Heap-Based Buffer Overflow issue was discovered in Advantech WebOP. A maliciously crafted...7.8 High
- axis 2100 network camera firmwareReflected XSS in the web administration portal on the Axis 2100 Network Camera 2.03 allows an...6.1 Medium
- openbsd openssh, debian linux, netapp active iq unified manager +18 more +20 moreThe process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write...5.3 Medium
- keystonejs keystoneCross-Site Scripting in keystone4.8 Medium
- eyesofnetworkSQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0...7.2 High
- keystonejs keystoneKeystone is vulnerable to CSV injection8.8 High
- keystonejs keystoneCross-Site Scripting in keystone6.1 Medium
- ibm liberty, liberty for java for bluemix +1 moreIBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.13)could allow a remote...7.5 High
- ibm infosphere master data managementIBM InfoSphere Master Data Management - Collaborative Edition 11.5 could allow an unauthorized...7.5 High
- ibm storwize unified v7000 softwareIBM System Storage Storwize V7000 Unified (V7000U) 1.5 and 1.6 uses weaker than expected...7.5 High
- ibm daeja viewoneIBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to a denial of...6.5 Medium
- ibm daeja viewoneIBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could disclose sensitive...2.5 Low
- ibm daeja viewoneIBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could allow an...7.5 High
- ibm daeja viewoneIBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 is vulnerable to cross-site...5.4 Medium
- ibm openpages grc platformIBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable to HTML injection. A remote attacker...5.4 Medium
- Show moreLoading…