Skip to content
OpenAdvisories

Archive

18 September 2017

Vulnerabilities first published on this day (UTC), newest first.

← August 2017 2017 / September /18 October 2017 →
  1. 130
  2. 24
  3. 39
  4. 412
  5. 526
  6. 626
  7. 777
  8. 858
  9. 914
  10. 102
  11. 1182
  12. 1250
  13. 13136
  14. 14130
  15. 1526
  16. 16 
  17. 1720
  18. 1859
  19. 1945
  20. 2051
  21. 2182
  22. 2241
  23. 2311
  24. 24 
  25. 2568
  26. 2630
  27. 2750
  28. 2840
  29. 2948
  30. 301
All Critical High Medium Low Exploited only Public exploit

59 results · Feed

  • Unscored —
    CVE-2017-14579

    STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, re…

  • Unscored —
    CVE-2017-14548

    STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, r…

  • Unscored —
    CVE-2017-14540

    IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a cr…

  • Unscored —
    CVE-2017-14552

    STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, r…

  • Unscored —
    CVE-2017-14566

    STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, re…

  • Unscored —
    CVE-2017-14562

    STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

  • Unscored —
    CVE-2017-0380

    The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.…

    tor tor tor Debian Ubuntu Alpine
  • Unscored —
    CVE-2014-6106

    Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1, 6.0, and 7.0 allows remote attack…

  • Unscored —
    CVE-2017-9798 Public exploit EPSS 95%

    Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a use…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine
  • Medium 6.1
    CVE-2017-12156

    Moodle XSS Vulnerability

    Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 4.3
    CVE-2017-12157

    Moodle sensitive information disclosure

    In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access.

    moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Unscored —
    CVE-2017-14534

    Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to location.php, related to PHP_SELF.

  • Unscored —
    CVE-2017-9333

    OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/c…

  • Unscored —
    CVE-2017-14530

    WP_Admin_UI in the Crony Cronjob Manager plugin before 0.4.7 for WordPress has CSRF via the name parameter in an action…

  • Unscored —
    CVE-2017-14533

    ImageMagick 7.0.6-6 has a memory leak in ReadMATImage in coders/mat.c.

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-14532

    ImageMagick 7.0.7-0 has a NULL Pointer Dereference in TIFFIgnoreTags in coders/tiff.c.

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-14531

    ImageMagick 7.0.7-0 has a memory exhaustion issue in ReadSUNImage in coders/sun.c.

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-14529

    The pe_print_idata function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in G…

    binutils binutils Debian Ubuntu
  • Unscored —
    CVE-2017-14528

    The TIFFSetProfiles function in coders/tiff.c in ImageMagick 7.0.6 has incorrect expectations about whether LibTIFF TIF…

    imagemagick imagemagick Debian Ubuntu