Skip to content
OpenAdvisories

Archive

11 October 2017

Vulnerabilities first published on this day (UTC), newest first.

← September 2017 2017 / October /11 November 2017 →
  1. 110
  2. 264
  3. 343
  4. 456
  5. 543
  6. 635
  7. 7 
  8. 8 
  9. 913
  10. 1084
  11. 1155
  12. 1223
  13. 1398
  14. 143
  15. 156
  16. 1643
  17. 1741
  18. 1854
  19. 19229
  20. 2019
  21. 2112
  22. 2260
  23. 23118
  24. 2434
  25. 257
  26. 2631
  27. 27102
  28. 288
  29. 2930
  30. 3031
  31. 3146
All Critical High Medium Low Exploited only Public exploit

55 results · Feed

  • Unscored —
    CVE-2017-8025

    RSA Archer GRC Platform prior to 6.2.0.5 is affected by an arbitrary file upload vulnerability. A remote unauthenticate…

  • Unscored —
    CVE-2017-8016

    RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Questionnaire ID field. An …

  • Unscored —
    CVE-2017-8017

    EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x is affected by a reflected cross-site scri…

  • Unscored —
    CVE-2017-14369

    RSA Archer GRC Platform prior to 6.2.0.5 is affected by a privilege escalation vulnerability. A low privileged RSA Arch…

  • Unscored —
    CVE-2017-14370

    RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Source Asset ID field. An a…

  • Unscored —
    CVE-2017-14003

    An Authentication Bypass by Spoofing issue was discovered in LAVA Ether-Serial Link (ESL) running firmware versions 6.0…

  • Unscored —
    CVE-2017-14371

    RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting via the request URL. Attackers c…

  • Unscored —
    CVE-2017-14372

    RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting vulnerabilities via certain RSA …

  • Critical 9.8
    CVE-2017-0903 EPSS 16%

    RubyGems vulnerable to Deserialization of Untrusted Data

    RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability. YAML deserialization of gem specifications can bypass class white lists. Specially crafted serialized objects can possibly be used to escalate to remo…

    HackerOne RubyGems ruby2.3 jruby Debian Ubuntu RubyGems
  • High 8.8
    CVE-2017-2888

    An exploitable integer overflow vulnerability exists when creating a new RGB Surface in SDL 2.0.5. A specially crafted …

    Talos Simple Direct Media libsdl2 libsdl2 Debian Ubuntu
  • High 8.8
    CVE-2017-2887

    An exploitable buffer overflow vulnerability exists in the XCF property handling functionality of SDL_image 2.0.1. A sp…

    Talos Simple Direct Media sdl-image1.2 libsdl2-image Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-15259

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-15254

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-15263

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-15251

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denia…

  • Unscored —
    CVE-2017-15243

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-15255

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-15260

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-15264

    IrfanView version 4.44 (32bit) allows attackers to cause a denial of service or possibly have unspecified other impact …

  • Unscored —
    CVE-2017-15240

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-15253

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denia…

  • Unscored —
    CVE-2017-15239

    IrfanView 4.44 - 32bit with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unsp…

  • Unscored —
    CVE-2017-15262

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denia…

  • Unscored —
    CVE-2017-15256

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-15261

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-15258

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-15249

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denia…

  • Unscored —
    CVE-2017-15247

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-15248

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denia…

  • Unscored —
    CVE-2017-15245

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-15242

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denia…

  • Unscored —
    CVE-2017-15257

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denia…

  • Unscored —
    CVE-2017-15244

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-15250

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-15252

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denia…

  • Unscored —
    CVE-2017-15246

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denia…

  • Unscored —
    CVE-2017-15241

    IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly h…

  • Unscored —
    CVE-2017-14588

    Various resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers to inject arbitrary HTM…

    Atlassian Atlassian Fisheye and Crucible
  • Unscored —
    CVE-2017-14587

    The administration user deletion resource in Atlassian Fisheye and Crucible before version 4.4.2 allows remote attacker…

    Atlassian Atlassian Fisheye and Crucible
  • Unscored —
    CVE-2017-13722

    In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary…

    libxfont libxfont libxfont2 Debian Ubuntu