CVEs published in October 2017
1,342 vulnerabilities, 197 critical, 6 exploited.
- iproject management system project management systemiProject Management System 1.0 allows SQL Injection via the ID parameter to index.php.9.8 Critical
- yourarticlesdirectory article directory scriptArticle Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category...9.8 Critical
- adultscriptproAdult Script Pro 2.2.4 allows SQL Injection via the PATH_INFO to a /download URI, a different...9.8 Critical
- domainzaar d-park proD-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php.9.8 Critical
- ingenious school management system project school management systemmy_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload...8.8 High
- converto video downloader \& converter project video downloader \& converterConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token...7.5 High
- linux kernelThe altivec_unavailable_exception function in arch/powerpc/kernel/traps.c in the Linux kernel...5.5 Medium
- quagga, debian linux +1 moreThe aspath_put function in bgpd/bgp_aspath.c in Quagga before 1.2.2 allows remote attackers to...7.5 High
- bchunk project bchunk, debian linux +1 morebchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to an "Access violation near NULL on...5.5 Medium
- bchunk project bchunk, debian linux +1 morebchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow ...5.5 Medium
- bchunk project bchunk, debian linux +1 morebchunk (related to BinChunker) 1.2.0 and 1.2.1 is vulnerable to a heap-based buffer overflow and...5.5 Medium
- angry-frog xavierXavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin...7.2 High
- grabaperch perchPerch Content Management System 3.0.3 allows unrestricted file upload (with resultant XSS) via...4.8 Medium
- aspsource simple asc content management systemSimple ASC Content Management System v1.2 has XSS in the location field in the sign function,...5.4 Medium
- selfget tag metaIn the com_tag component 1.7.6 for Joomla!, a SQL injection vulnerability is located in the `tag`...9.8 Critical
- mariadb, mysql +1 moreThe installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev...7.8 High
- gnu binutilsdwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils...5.5 Medium
- gnu binutilsdwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils...7.5 High
- artica pandora fmsArtica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting...6.5 Medium
- artica pandora fmsIn Artica Pandora FMS version 7.0, an Attacker with write Permission can create an agent with an...5.4 Medium
- artica pandora fmsArtica Pandora FMS version 7.0 is vulnerable to remote PHP code execution through the manager...7.2 High
- artica pandora fmsArtica Pandora FMS version 7.0 is vulnerable to stored Cross-Site Scripting in the map name...5.4 Medium
- writediary diary with lockIn net.MCrypt in the "Diary with lock" (aka WriteDiary) application 4.72 for Android, hardcoded...7.5 High
- writediary diary with lockIn the "Diary with lock" (aka WriteDiary) application 4.72 for Android, neither HTTPS nor other...7.5 High
- eyesofnetworkSQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0...7.2 High
- apache cordovaApache Cordova Android before 3.7.2 and 4.x before 4.0.2, when an application does not set...5.3 Medium
- apache activemqImproper Restriction of XML External Entity Reference in Apache ActiveMQ9.8 Critical
- apache activemq apolloApache ActiveMQ Apollo XXE Vulnerability9.8 Critical
- radare radare2In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access)...7.8 High
- radare radare2In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access)...7.8 High
- graphicsmagick, debian linux +1 moreIn ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26, a Null Pointer Dereference occurs...8.8 High
- apache ws-xmlrpcApache XML-RPC vulnerable to Deserialization of Untrusted Data9.8 Critical
- apache xml-rpcApache XML-RPC XXE Vulnerability7.8 High
- ox project oxOx gem crashes due to a crafted input7.5 High
- shadowsocks shadowsocks-libev, debian linux +1 moreIn manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection...7.8 High
- f5 networks, inc. big-ip ltm, aam, afm, apm, asm, link controller, pem, psm, f5 big-ip access policy manager, big-ip advanced firewall manager +6 more +8 moreIn F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2...5.9 Medium
- f5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, websafe, f5 big-ip access policy manager, big-ip advanced firewall manager +6 more +8 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM,...5.9 Medium
- f5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, edge gateway, gtm, link controller, pem, webaccelerator, f5 big-ip access policy manager, big-ip advanced firewall manager +9 more +11 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM,...5.3 Medium
- f5 big-ip application acceleration manager, big-ip policy enforcement manager, f5 networks, inc. big-ip aam, pem +2 moreIn F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a...5.9 Medium
- f5 networks, inc. big-ip ltm, aam, afm, analytics, apm, asm, dns, gtm, link controller, pem, websafe, f5 big-ip access policy manager, big-ip advanced firewall manager +6 more +8 moreF5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software...5.9 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip application acceleration manager +6 more +8 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe...8.1 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip application acceleration manager +6 more +8 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe...7.5 High
- fortinet fortiosA Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 and 5.6.0 allows a...6.1 Medium
- fortinet fortiosA Denial of Service (DoS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an...6.5 Medium
- huawei hilink, tech support, huawei technologies co., ltd. hilink app (for ios), huawei tech support app (for ios) +2 moreHUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for...3.5 Low
- google chromeInsufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.115 for Mac...6.5 Medium
- google chrome osInappropriate implementation in image-burner in Google Chrome OS prior to 59.0.3071.92 allowed a...3.3 Low
- linux kernelThe KEYS subsystem in the Linux kernel before 4.13.10 does not correctly synchronize the actions...7.8 High
- ibm bigfix platformIBM Tivoli Endpoint Manager (for Lifecycle/Power/Patch) Platform and Applications (IBM BigFix...6.1 Medium
- ibm bigfix platformIBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) transmits sensitive or security...5.9 Medium
- Show moreLoading…