Skip to content
OpenAdvisories

Archive

4 September 2017

Vulnerabilities first published on this day (UTC), newest first.

← August 2017 2017 / September /4 October 2017 →
  1. 130
  2. 24
  3. 39
  4. 412
  5. 526
  6. 626
  7. 777
  8. 858
  9. 914
  10. 102
  11. 1182
  12. 1250
  13. 13136
  14. 14130
  15. 1526
  16. 16 
  17. 1720
  18. 1859
  19. 1945
  20. 2051
  21. 2182
  22. 2241
  23. 2311
  24. 24 
  25. 2568
  26. 2630
  27. 2750
  28. 2840
  29. 2948
  30. 301
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Medium 6.5
    CVE-2017-14136

    Out-of-bounds Write in OpenCV

    OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12597.

    opencv-python opencv-contrib-python opencv Ubuntu PyPI
  • Unscored —
    CVE-2017-14138

    ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in ce…

    imagemagick Debian
  • Unscored —
    CVE-2017-14139

    ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c.

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-14135 Scanner template EPSS 22%

    enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remot…

  • Unscored —
    CVE-2017-14137

    ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depe…

    imagemagick Debian
  • Unscored —
    CVE-2017-14123

    Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. An…

  • Unscored —
    CVE-2017-14130

    The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as dist…

    binutils binutils Debian Ubuntu
  • Unscored —
    CVE-2017-14127

    Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices allows remote attacker…

  • Unscored —
    CVE-2017-14126 Public exploit

    The Participants Database plugin before 1.7.5.10 for WordPress has XSS.

  • Unscored —
    CVE-2017-14132

    JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.90…

    jasper Ubuntu
  • Unscored —
    CVE-2017-14129

    The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU B…

    binutils binutils Debian Ubuntu
  • Unscored —
    CVE-2017-14128

    The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in G…

    binutils binutils Debian Ubuntu