Skip to content
OpenAdvisories

Archive

2 May 2017

Vulnerabilities first published on this day (UTC), newest first.

← April 2017 2017 / May /2 June 2017 →
  1. 131
  2. 221
  3. 328
  4. 419
  5. 543
  6. 611
  7. 71
  8. 826
  9. 940
  10. 1031
  11. 1125
  12. 12174
  13. 13 
  14. 144
  15. 1529
  16. 1638
  17. 1721
  18. 1841
  19. 1930
  20. 20 
  21. 2124
  22. 22127
  23. 23117
  24. 2417
  25. 2526
  26. 2625
  27. 271
  28. 2810
  29. 2926
  30. 3016
  31. 318
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2015-9004

    kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain priv…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2014-9940

    The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2017-0331

    An elevation of privilege vulnerability in the NVIDIA video driver could enable a local malicious application to execut…

  • Unscored —
    CVE-2017-7476

    Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable. The error is in the save_ab…

  • Unscored —
    CVE-2017-8421

    The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed…

    binutils binutils Debian Ubuntu
  • Unscored —
    CVE-2017-7216

    The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to obtain sens…

  • Unscored —
    CVE-2015-8257 Public exploit EPSS 18%

    The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shel…

  • Unscored —
    CVE-2016-4467

    The C client and C-based client bindings in the Apache Qpid Proton library before 0.13.1 on Windows do not properly ver…

  • Medium 5.3
    CVE-2016-4442

    rack-mini-profiler allows remote attackers to obtain sensitive information about allocated strings and objects

    The rack-mini-profiler gem before 0.10.1 for Ruby allows remote attackers to obtain sensitive information about allocated strings and objects by leveraging incorrect ordering of security checks.

    rack-mini-profiler RubyGems
  • Unscored —
    CVE-2016-10243

    TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_command…

    texlive-bin texlive-base texlive-base Debian Ubuntu
  • Unscored —
    CVE-2016-5810 Public exploit EPSS 15%

    upAdminPg.asp in Advantech WebAccess before 8.1_20160519 allows remote authenticated administrators to obtain sensitive…

  • Unscored —
    CVE-2016-5006

    The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation, which allows attackers…

  • Unscored —
    CVE-2016-5063 Public exploit

    The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote att…

  • Unscored —
    CVE-2017-7483

    Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which…

    The RXVT Project rxvt rxvt Ubuntu
  • Unscored —
    CVE-2017-7440

    Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2…

  • Unscored —
    CVE-2017-6551

    Pexip Infinity before 14.2 allows remote attackers to cause a denial of service (service restart) or execute arbitrary …

  • Low 3.3
    CVE-2017-8418

    RuboCop gem Insecure use of /tmp

    RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users.

    rubocop rubocop Debian RubyGems
  • Unscored —
    CVE-2017-8086

    Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS pr…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-8419

    LAME through 3.99.5 relies on the signed integer data type for values in a WAV or AIFF header, which allows remote atta…

    lame lame Debian Ubuntu
  • Unscored —
    CVE-2017-8112

    hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (…

    qemu qemu Debian Ubuntu
  • Critical 9.8
    CVE-2017-5689 Exploited Public exploit Scanner template EPSS 92%

    An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Man…

    Intel Intel Active Mangement Technology, Intel Small Business Technology, Intel Standard Manageability
    KEV Jan 28, 2022