Archive

September 2017

Vulnerabilities first published in this month (UTC), newest first.

← August 2017 2017 / September October 2017 →

All Critical High Medium Low Exploited only Public exploit

1,228 results · Feed

Unscored —

CVE-2017-14573

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, re…

Sep 18, 2017
Unscored —

CVE-2017-14576

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

Sep 18, 2017
Unscored —

CVE-2017-14561

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, re…

Sep 18, 2017
Unscored —

CVE-2017-14542

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .epub file, r…

Sep 18, 2017
Unscored —

CVE-2017-14546

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

Sep 18, 2017
Unscored —

CVE-2017-14545

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

Sep 18, 2017
Unscored —

CVE-2017-14549

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, r…

Sep 18, 2017
Unscored —

CVE-2017-14575

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, re…

Sep 18, 2017
Unscored —

CVE-2017-14574

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, re…

Sep 18, 2017
Unscored —

CVE-2017-14539

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a cr…

Sep 18, 2017
Unscored —

CVE-2017-14544

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

Sep 18, 2017
Unscored —

CVE-2017-14538

XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a c…

Sep 18, 2017
Unscored —

CVE-2017-14547

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

Sep 18, 2017
Unscored —

CVE-2017-14556

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, r…

Sep 18, 2017
Unscored —

CVE-2017-14578

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a cr…

Sep 18, 2017
Unscored —

CVE-2017-14554

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

Sep 18, 2017
Unscored —

CVE-2017-14580

XnView Classic for Windows Version 2.41 allows attackers to execute arbitrary code or cause a denial of service via a c…

Sep 18, 2017
Unscored —

CVE-2017-14555

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

Sep 18, 2017
Unscored —

CVE-2017-14571

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, re…

Sep 18, 2017
Unscored —

CVE-2017-14557

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, r…

Sep 18, 2017
Unscored —

CVE-2017-14559

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, re…

Sep 18, 2017
Unscored —

CVE-2017-14551

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

Sep 18, 2017
Unscored —

CVE-2017-14567

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, re…

Sep 18, 2017
Unscored —

CVE-2017-14550

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

Sep 18, 2017
Unscored —

CVE-2017-14560

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

Sep 18, 2017
Unscored —

CVE-2017-14558

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, r…

Sep 18, 2017
Unscored —

CVE-2017-14564

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

Sep 18, 2017
Unscored —

CVE-2017-14579

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, re…

Sep 18, 2017
Unscored —

CVE-2017-14548

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, r…

Sep 18, 2017
Unscored —

CVE-2017-14540

IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a cr…

Sep 18, 2017
Unscored —

CVE-2017-14552

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .djvu file, r…

Sep 18, 2017
Unscored —

CVE-2017-14566

STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, re…

Sep 18, 2017
Unscored —

CVE-2017-14562

STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a craft…

Sep 18, 2017
Unscored —

CVE-2017-0380

The rend_service_intro_established function in or/rendservice.c in Tor before 0.2.8.15, 0.2.9.x before 0.2.9.12, 0.3.0.…

tor tor tor Debian Ubuntu Alpine

Sep 18, 2017
Unscored —

CVE-2014-6106

Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1, 6.0, and 7.0 allows remote attack…

Sep 18, 2017
Unscored —

CVE-2017-9798 Public exploit EPSS 95%

Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a use…

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu Alpine

Sep 18, 2017
Medium 6.1

CVE-2017-12156

Moodle XSS Vulnerability

Moodle 3.x has XSS in the contact form on the "non-respondents" page in non-anonymous feedback.

moodle/moodle moodle Web / CMS Ubuntu Packagist

Sep 18, 2017
Medium 4.3

CVE-2017-12157

Moodle sensitive information disclosure

In Moodle 3.x, various course reports allow teachers to view details about users in the groups they can't access.

moodle/moodle moodle Web / CMS Ubuntu Packagist

Sep 18, 2017
Unscored —

CVE-2017-14534

Cross Site Scripting (XSS) exists in NexusPHP 1.5.beta5.20120707 via the PATH_INFO to location.php, related to PHP_SELF.

Sep 18, 2017
Unscored —

CVE-2017-9333

OpenWebif 1.2.5 allows remote code execution via a URL to the CallOPKG function in the IpkgController class in plugin/c…

Sep 18, 2017