Skip to content
OpenAdvisories

Archive

29 April 2017

Vulnerabilities first published on this day (UTC), newest first.

← March 2017 2017 / April /29 May 2017 →
  1. 19
  2. 2177
  3. 348
  4. 423
  5. 534
  6. 632
  7. 787
  8. 8 
  9. 926
  10. 1098
  11. 1136
  12. 12154
  13. 1377
  14. 1460
  15. 152
  16. 161
  17. 1732
  18. 1814
  19. 1923
  20. 20101
  21. 2147
  22. 226
  23. 2319
  24. 24281
  25. 2537
  26. 2611
  27. 2720
  28. 2876
  29. 299
  30. 3029
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Unscored —
    CVE-2017-8327

    The bmpr_read_uncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote a…

  • Unscored —
    CVE-2017-8325

    The iw_process_cols_to_intermediate function in imagew-main.c in libimageworsener.a in ImageWorsener before 1.3.1 allow…

  • Unscored —
    CVE-2017-8326

    libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior …

  • High 7.5
    CVE-2017-7957

    Denial of service in XStream

    XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'void' during unmarshalling, leading to a remote application crash, as demonstrated by an xstream.fromXML("<void/>") call.

    com.thoughtworks.xstream:xstream libxstream-java libxstream-java Debian Ubuntu Maven
  • Unscored —
    CVE-2017-8114

    Roundcube Webmail allows arbitrary password resets by authenticated users. This affects versions before 1.0.11, 1.1.x b…

    roundcube roundcube roundcubemail Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-7981 Public exploit EPSS 15%

    Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin. This occurs in the Project …

  • Unscored —
    CVE-2017-6553 Public exploit EPSS 42%

    Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain ful…

  • Unscored —
    CVE-2017-7945

    The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9,…

  • Unscored —
    CVE-2017-7644

    The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, and 7.1.x before 7.1.9 allo…