Skip to content
OpenAdvisories

Archive

9 October 2017

Vulnerabilities first published on this day (UTC), newest first.

← September 2017 2017 / October /9 November 2017 →
  1. 110
  2. 264
  3. 343
  4. 456
  5. 543
  6. 635
  7. 7 
  8. 8 
  9. 913
  10. 1084
  11. 1155
  12. 1223
  13. 1398
  14. 143
  15. 156
  16. 1643
  17. 1741
  18. 1854
  19. 19229
  20. 2019
  21. 2112
  22. 2260
  23. 23118
  24. 2434
  25. 257
  26. 2631
  27. 27102
  28. 288
  29. 2930
  30. 3031
  31. 3146
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2015-7842

    Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100…

  • Unscored —
    CVE-2014-0030 Public exploit EPSS 17%

    The XML-RPC protocol support in Apache Roller before 5.0.3 allows attackers to conduct XML External Entity (XXE) attack…

  • Unscored —
    CVE-2014-9474

    Buffer overflow in the mpfr_strtofr function in GNU MPFR before 3.1.2-p11 allows context-dependent attackers to have un…

    mpfr4 mpfr4 Debian Ubuntu
  • Unscored —
    CVE-2017-13723

    In X.Org Server (aka xserver and xorg-server) before 1.19.4, a local attacker authenticated to the X server could overf…

    xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-13721

    In X.Org Server (aka xserver and xorg-server) before 1.19.4, an attacker authenticated to an X server with the X shared…

    xorg-server xorg-server xorg-server-hwe-16.04 xorg-server Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-15038

    Race condition in the v9fs_xattrwalk function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS users …

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-14603

    In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-ce…

    asterisk asterisk Debian Ubuntu
  • Unscored —
    CVE-2017-14614

    Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before…

  • Unscored —
    CVE-2017-14980 Public exploit EPSS 22%

    Buffer overflow in Sync Breeze Enterprise 10.0.28 allows remote attackers to have unspecified impact via a long usernam…

  • Unscored —
    CVE-2017-15185

    plugins/ogg.c in Libmp3splt 0.9.2 calls the libvorbis vorbis_block_clear function with uninitialized data upon detectio…

    mp3splt libmp3splt Debian Ubuntu
  • Unscored —
    CVE-2017-14971

    Infocus Mondopad 2.2.08 is vulnerable to a Hashed Credential Disclosure vulnerability. The attacker provides a crafted …

  • Unscored —
    CVE-2017-14973

    IDenticard Two-Reader Controller Configuration Manager 1.18.8 (396) is vulnerable to Stored Cross-Site Scripting (XSS) …

  • Unscored —
    CVE-2017-14972

    InFocus Mondopad 2.2.08 is vulnerable to authentication bypass when accessing uploaded files by entering Control-Alt-De…