Archive
August 2017
Vulnerabilities first published in this month (UTC), newest first.
1,540 results · Feed
-
Unscored —
A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attac…
-
Unscored —
A vulnerability in Cisco Elastic Services Controller could allow an authenticated, local, unprivileged attacker to acce…
-
Unscored —
A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) cou…
-
Unscored —
A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could…
-
Unscored —
A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application …
-
Unscored —
The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could all…
-
Unscored —
A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could al…
-
Unscored —
A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating syst…
-
Unscored —
A vulnerability in the Cisco Virtual Network Function (VNF) Element Manager could allow an authenticated, remote attack…
-
Unscored —
A vulnerability in the Elastic Services Controller (ESC) web interface of the Cisco Ultra Services Platform could allow…
-
Unscored —
A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content…
-
Unscored —
A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an authenticated, remote…
-
Unscored —
A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote …
-
Unscored —
A vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to view sensit…
-
Unscored —
A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could all…
-
Unscored —
A vulnerability in the web framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote …
-
Unscored —
A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating syst…
-
Unscored —
A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an …
-
High 8.8
Cross-Site Request Forgery in hawtio
Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their website containing a malicious script which can be submitted to hawtio server on behalf of the user.
-
Unscored —
Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of esca…
-
Unscored —
Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011.
-
Unscored —CVE-2017-11662 Public exploit
The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and appl…
-
Unscored —CVE-2017-11664 Public exploit
The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory…
-
Unscored —CVE-2017-11663 Public exploit
The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory…
-
Unscored —
The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory…
-
Unscored —
The mdjvu_bitmap_get_bounding_box function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid mem…
-
Unscored —
The row_is_empty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service (invalid memory read and …
-
Unscored —
The row_is_empty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service (invalid memory read and …
-
Unscored —
The mdjvu_bitmap_pack_row function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read…
-
Unscored —
The JB2BitmapCoder::code_row_by_refinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of service (…
-
Unscored —
Foxit PDF Compressor installers from versions from 7.0.0.183 to 7.7.2.10 contain a DLL preloading vulnerability, wherei…
-
Unscored —
PostgreSQL versions before 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote authenticated a…
-
Unscored —
389-ds-base version before 1.3.5.19 and 1.3.6.7 are vulnerable to password brute-force attacks during account lockout d…
-
Unscored —
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to authorization flaw allowing remote…
-
Unscored —CVE-2017-7546 EPSS 62%
PostgreSQL versions before 9.2.22, 9.3.18, 9.4.13, 9.5.8 and 9.6.4 are vulnerable to incorrect authentication flaw allo…
-
Unscored —
In a sound driver in Android for MSM, Firefox OS for MSM, QRD Android, some variables are from userspace and values can…
-
Unscored —
When a control related to codec is issued from userspace in all Qualcomm products with Android for MSM, Firefox OS for …
-
Unscored —
In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, a user-supplied buffer i…
-
Unscored —
In a sound driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, if a function is c…
-
Unscored —
In a driver in all Qualcomm products with Android for MSM, Firefox OS for MSM, or QRD Android, kernel heap memory can b…