CVEs

129,067 total · page 2420 of 2,582

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2017-0788	Google Android	Hig	0.57	8.8	0.00		Sep 8, 2017	A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37722328. References: B-V2017053103.
CVE-2017-0787	Google Android	Hig	0.57	8.8	0.00		Sep 8, 2017	A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37722970. References: B-V2017053104.
CVE-2017-0786	Google Android	Hig	0.57	8.8	0.00		Sep 8, 2017	A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37351060. References: B-V2017060101.
CVE-2017-0784	Google Android	Hig	0.57	8.8	0.00		Sep 8, 2017	A elevation of privilege vulnerability in the Android system (nfc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37287958.
CVE-2017-0778	Google Android	Hig	0.46	7.1	0.00		Sep 8, 2017	A information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-62133227.
CVE-2017-0770	Google Android	Hig	0.51	7.8	0.00		Sep 8, 2017	A elevation of privilege vulnerability in the Android media framework (libmediaplayerservice). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38234812.
CVE-2017-0769	Google Android	Hig	0.51	7.8	0.00		Sep 8, 2017	A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37662122.
CVE-2017-0768	Google Android	Hig	0.51	7.8	0.00		Sep 8, 2017	A elevation of privilege vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62019992.
CVE-2017-0767	Google Android	Hig	0.51	7.8	0.00		Sep 8, 2017	A elevation of privilege vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37536407.
CVE-2017-0766	Google Android	Hig	0.51	7.8	0.01		Sep 8, 2017	A remote code execution vulnerability in the Android media framework (libjhead). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37776688.
CVE-2017-0765	Google Android	Hig	0.51	7.8	0.01		Sep 8, 2017	A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872863.
CVE-2017-0764	Google Android	Hig	0.51	7.8	0.01		Sep 8, 2017	A remote code execution vulnerability in the Android media framework (libvorbis). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015.
CVE-2017-0763	Google Android	Hig	0.51	7.8	0.01		Sep 8, 2017	A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62534693.
CVE-2017-0762	Google Android	Hig	0.51	7.8	0.01		Sep 8, 2017	A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62214264.
CVE-2017-0761	Google Android	Hig	0.51	7.8	0.01		Sep 8, 2017	A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38448381.
CVE-2017-0760	Google Android	Hig	0.51	7.8	0.01		Sep 8, 2017	A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237396.
CVE-2017-0759	Google Android	Hig	0.51	7.8	0.01		Sep 8, 2017	A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36715268.
CVE-2017-0758	Google Android	Hig	0.51	7.8	0.01		Sep 8, 2017	A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492741.
CVE-2017-0757	Google Android	Hig	0.51	7.8	0.01		Sep 8, 2017	A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36006815.
CVE-2017-0756	Google Android	Hig	0.51	7.8	0.01		Sep 8, 2017	A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34621073.
CVE-2017-0755	Google Android	Hig	0.51	7.8	0.00		Sep 8, 2017	A elevation of privilege vulnerability in the Android libraries (libminikin). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-32178311.
CVE-2017-0753	Google Android	Hig	0.51	7.8	0.01		Sep 8, 2017	A remote code execution vulnerability in the Android libraries (libgdx). Product: Android. Versions: 7.1.1, 7.1.2, 8.0. Android ID: A-62218744.
CVE-2017-0752	Google Android	Hig	0.51	7.8	0.00		Sep 8, 2017	A elevation of privilege vulnerability in the Android framework (windowmanager). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62196835.
CVE-2017-12146	Linux Kernel	Hig	0.46	7.0	0.00		Sep 8, 2017	The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1 allows local users to gain privileges by leveraging a race condition between a read operation and a store operation that involve different overrides.
CVE-2017-14167	QEMU Qemu	Hig	0.57	8.8	0.01		Sep 8, 2017	Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write.
CVE-2016-5759	Novell Suse Linux Enterprise Desktop	Hig	0.51	7.8	0.00		Sep 8, 2017	The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
CVE-2011-3177	Yast Yast2	Hig	0.44	7.8	0.00		Sep 8, 2017	The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks.
CVE-2017-2550	Kubik Rubik Easy Joomla Backup	Hig	0.49	7.5	0.01		Sep 8, 2017	Vulnerability in Easy Joomla Backup v3.2.4. The software creates a copy of the backup in the web root with an easily guessable filename.
CVE-2017-6791	Cisco Systems, Inc. Unified Communications Manager	Hig	0.49	7.5	0.02		Sep 7, 2017	A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of Transport Layer…
CVE-2017-6780	Cisco Systems, Inc. Connected Grid Network Management System	Hig	0.49	7.5	0.02		Sep 7, 2017	A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart, aka Memory Exhaustion. The vulnerability is…
CVE-2017-6631	Cisco Systems, Inc. YesMaxTotal	Hig	0.49	7.5	0.02		Sep 7, 2017	A vulnerability in the HTTP remote procedure call (RPC) service of set-top box (STB) receivers manufactured by Cisco for Yes could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the…
CVE-2017-6627	Cisco Systems, Inc. Cisco iOS	Hig	0.61	7.5	0.06	KEV	Sep 7, 2017	A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and a denial of service…
CVE-2017-12216	Cisco Systems, Inc. Socialminer	Hig	0.57	8.8	0.03		Sep 7, 2017	A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to have read and write access to information stored in the affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries…
CVE-2015-4724	Concrete5 Concrete5	Hig	0.57	8.8	0.01		Sep 7, 2017	SQL injection vulnerability in Concrete5 5.7.3.1.
CVE-2015-4697	WordPress Google Analyticator	Hig	0.50	8.8	0.01		Sep 7, 2017	Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.
CVE-2015-4619	Denkgroot Spina	Hig	0.50	8.8	0.01		Sep 7, 2017	Cross-site request forgery (CSRF) vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75.
CVE-2015-4085	Etherpad Etherpad	Hig	0.42	7.5	0.02		Sep 7, 2017	Directory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests before 1.6.1.
CVE-2015-3314	WordPress Tune Library	Hig	0.56	8.1	0.05		Sep 7, 2017	SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5.
CVE-2015-3222	Ossec Ossec	Hig	0.42	7.0	0.02		Sep 7, 2017	syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root.
CVE-2014-9565	IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware	Hig	0.57	8.8	0.01		Sep 7, 2017	Cross-site request forgery (CSRF) vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware 3.4.0000 and earlier.
CVE-2017-14181	Aacplusenc Project Aacplusenc	Hig	0.51	7.8	0.01		Sep 7, 2017	DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service (invalid memory write, SEGV on unknown address 0x000000000030, and application crash) or possibly have unspecified other impact via a crafted .wav file,…
CVE-2013-7428	Joomla Googlemaps plugin	Hig	0.49	7.5	0.02		Sep 7, 2017	The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url parameter to plugin_googlemap2_proxy.php.
CVE-2017-9779	Ocaml Ocaml	Hig	0.51	7.8	0.01		Sep 7, 2017	OCaml compiler allows attackers to have unspecified impact via unknown vectors, a similar issue to CVE-2017-9772 "but with much less impact."
CVE-2015-1590	Kamailio Kamailio	Hig	0.44	7.8	0.00		Sep 7, 2017	The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailio_ctl.
CVE-2017-6362	Libgd Libgd	Hig	0.49	7.5	0.05		Sep 7, 2017	Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors.
CVE-2017-13713	TWపంచ BE126	Hig	0.61	8.8	0.09		Sep 7, 2017	T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg.
CVE-2017-12838	Nexusphp Project Nexusphp	Hig	0.57	8.8	0.01		Sep 7, 2017	Cross-site request forgery (CSRF) vulnerability in NexusPHP 1.5 allows remote attackers to hijack the authentication of users for requests that (1) send manas via a request to mybonus.php or (2) add administrators via unspecified vectors.
CVE-2017-11567	Mongoose Mongoose Web Server	Hig	0.61	8.8	0.04		Sep 7, 2017	Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the authentication of users for requests that modify Mongoose.conf via a request to __mg_admin?save. NOTE: this issue can be leveraged to execute arbitrary code…
CVE-2016-0732	Cloudfoundry Elastic Runtime	Hig	0.57	8.8	0.01		Sep 7, 2017	The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with multiple identity zones; and Elastic Runtime 1.6.0 through 1.6.13 allows remote authenticated users with privileges in one zone…
CVE-2015-3250	Apache Directory LDAP API	Hig	0.42	7.5	0.05		Sep 7, 2017	Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors.

CVE-2017-0788HigSep 8, 2017
Google
Android
risk 0.57cvss 8.8epss 0.00
A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37722328. References: B-V2017053103.
CVE-2017-0787HigSep 8, 2017
Google
Android
risk 0.57cvss 8.8epss 0.00
A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37722970. References: B-V2017053104.
CVE-2017-0786HigSep 8, 2017
Google
Android
risk 0.57cvss 8.8epss 0.00
A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-37351060. References: B-V2017060101.
CVE-2017-0784HigSep 8, 2017
Google
Android
risk 0.57cvss 8.8epss 0.00
A elevation of privilege vulnerability in the Android system (nfc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37287958.
CVE-2017-0778HigSep 8, 2017
Google
Android
risk 0.46cvss 7.1epss 0.00
A information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-62133227.
CVE-2017-0770HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.00
A elevation of privilege vulnerability in the Android media framework (libmediaplayerservice). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38234812.
CVE-2017-0769HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.00
A elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-37662122.
CVE-2017-0768HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.00
A elevation of privilege vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62019992.
CVE-2017-0767HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.00
A elevation of privilege vulnerability in the Android media framework (libeffects). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37536407.
CVE-2017-0766HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.01
A remote code execution vulnerability in the Android media framework (libjhead). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37776688.
CVE-2017-0765HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.01
A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872863.
CVE-2017-0764HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.01
A remote code execution vulnerability in the Android media framework (libvorbis). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62872015.
CVE-2017-0763HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.01
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62534693.
CVE-2017-0762HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.01
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62214264.
CVE-2017-0761HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.01
A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-38448381.
CVE-2017-0760HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.01
A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37237396.
CVE-2017-0759HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.01
A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36715268.
CVE-2017-0758HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.01
A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36492741.
CVE-2017-0757HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.01
A remote code execution vulnerability in the Android media framework (libavc). Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36006815.
CVE-2017-0756HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.01
A remote code execution vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34621073.
CVE-2017-0755HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.00
A elevation of privilege vulnerability in the Android libraries (libminikin). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-32178311.
CVE-2017-0753HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.01
A remote code execution vulnerability in the Android libraries (libgdx). Product: Android. Versions: 7.1.1, 7.1.2, 8.0. Android ID: A-62218744.
CVE-2017-0752HigSep 8, 2017
Google
Android
risk 0.51cvss 7.8epss 0.00
A elevation of privilege vulnerability in the Android framework (windowmanager). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62196835.
CVE-2017-12146HigSep 8, 2017
Linux
Kernel
risk 0.46cvss 7.0epss 0.00
The driver_override implementation in drivers/base/platform.c in the Linux kernel before 4.12.1 allows local users to gain privileges by leveraging a race condition between a read operation and a store operation that involve different overrides.
CVE-2017-14167HigSep 8, 2017
QEMU
Qemu
risk 0.57cvss 8.8epss 0.01
Integer overflow in the load_multiboot function in hw/i386/multiboot.c in QEMU (aka Quick Emulator) allows local guest OS users to execute arbitrary code on the host via crafted multiboot header address values, which trigger an out-of-bounds write.
CVE-2016-5759HigSep 8, 2017
Novell
Suse Linux Enterprise Desktop
risk 0.51cvss 7.8epss 0.00
The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
CVE-2011-3177HigSep 8, 2017
Yast
Yast2
risk 0.44cvss 7.8epss 0.00
The YaST2 network created files with world readable permissions which could have allowed local users to read sensitive material out of network configuration files, like passwords for wireless networks.
CVE-2017-2550HigSep 8, 2017
Kubik Rubik
Easy Joomla Backup
risk 0.49cvss 7.5epss 0.01
Vulnerability in Easy Joomla Backup v3.2.4. The software creates a copy of the backup in the web root with an easily guessable filename.
CVE-2017-6791HigSep 7, 2017
Cisco Systems, Inc.
Unified Communications Manager
risk 0.49cvss 7.5epss 0.02
A vulnerability in the Trust Verification Service (TVS) of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper handling of Transport Layer…
CVE-2017-6780HigSep 7, 2017
Cisco Systems, Inc.
Connected Grid Network Management System
risk 0.49cvss 7.5epss 0.02
A vulnerability in the TCP throttling process for Cisco IoT Field Network Director (IoT-FND) could allow an unauthenticated, remote attacker to cause the system to consume additional memory, eventually forcing the device to restart, aka Memory Exhaustion. The vulnerability is…
CVE-2017-6631HigSep 7, 2017
Cisco Systems, Inc.
YesMaxTotal
risk 0.49cvss 7.5epss 0.02
A vulnerability in the HTTP remote procedure call (RPC) service of set-top box (STB) receivers manufactured by Cisco for Yes could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability exists because the…
CVE-2017-6627HigKEVSep 7, 2017
Cisco Systems, Inc.
Cisco iOS
risk 0.61cvss 7.5epss 0.06
A vulnerability in the UDP processing code of Cisco IOS 15.1, 15.2, and 15.4 and IOS XE 3.14 through 3.18 could allow an unauthenticated, remote attacker to cause the input queue of an affected system to hold UDP packets, causing an interface queue wedge and a denial of service…
CVE-2017-12216HigSep 7, 2017
Cisco Systems, Inc.
Socialminer
risk 0.57cvss 8.8epss 0.03
A vulnerability in the web-based user interface of Cisco SocialMiner could allow an unauthenticated, remote attacker to have read and write access to information stored in the affected system. The vulnerability is due to improper handling of XML External Entity (XXE) entries…
CVE-2015-4724HigSep 7, 2017
Concrete5
Concrete5
risk 0.57cvss 8.8epss 0.01
SQL injection vulnerability in Concrete5 5.7.3.1.
CVE-2015-4697HigSep 7, 2017
WordPress
Google Analyticator
risk 0.50cvss 8.8epss 0.01
Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563.
CVE-2015-4619HigSep 7, 2017
Denkgroot
Spina
risk 0.50cvss 8.8epss 0.01
Cross-site request forgery (CSRF) vulnerability in Spina before commit bfe44f289e336f80b6593032679300c493735e75.
CVE-2015-4085HigSep 7, 2017
Etherpad
Etherpad
risk 0.42cvss 7.5epss 0.02
Directory traversal vulnerability in node/hooks/express/tests.js in Etherpad frontend tests before 1.6.1.
CVE-2015-3314HigSep 7, 2017
WordPress
Tune Library
risk 0.56cvss 8.1epss 0.05
SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5.
CVE-2015-3222HigSep 7, 2017
Ossec
Ossec
risk 0.42cvss 7.0epss 0.02
syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root.
CVE-2014-9565HigSep 7, 2017
IBM
Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware
risk 0.57cvss 8.8epss 0.01
Cross-site request forgery (CSRF) vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware 3.4.0000 and earlier.
CVE-2017-14181HigSep 7, 2017
Aacplusenc Project
Aacplusenc
risk 0.51cvss 7.8epss 0.01
DeleteBitBuffer in libbitbuf/bitbuffer.c in mp4tools aacplusenc 0.17.5 allows remote attackers to cause a denial of service (invalid memory write, SEGV on unknown address 0x000000000030, and application crash) or possibly have unspecified other impact via a crafted .wav file,…
CVE-2013-7428HigSep 7, 2017
Joomla
Googlemaps plugin
risk 0.49cvss 7.5epss 0.02
The Googlemaps plugin before 3.1 for Joomla! allows remote attackers to cause a denial of service via the url parameter to plugin_googlemap2_proxy.php.
CVE-2017-9779HigSep 7, 2017
Ocaml
Ocaml
risk 0.51cvss 7.8epss 0.01
OCaml compiler allows attackers to have unspecified impact via unknown vectors, a similar issue to CVE-2017-9772 "but with much less impact."
CVE-2015-1590HigSep 7, 2017
Kamailio
Kamailio
risk 0.44cvss 7.8epss 0.00
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailio_ctl.
CVE-2017-6362HigSep 7, 2017
Libgd
Libgd
risk 0.49cvss 7.5epss 0.05
Double free vulnerability in the gdImagePngPtr function in libgd2 before 2.2.5 allows remote attackers to cause a denial of service via vectors related to a palette with no colors.
CVE-2017-13713HigSep 7, 2017
TWపంచ
BE126
risk 0.61cvss 8.8epss 0.09
T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg.
CVE-2017-12838HigSep 7, 2017
Nexusphp Project
Nexusphp
risk 0.57cvss 8.8epss 0.01
Cross-site request forgery (CSRF) vulnerability in NexusPHP 1.5 allows remote attackers to hijack the authentication of users for requests that (1) send manas via a request to mybonus.php or (2) add administrators via unspecified vectors.
CVE-2017-11567HigSep 7, 2017
Mongoose
Mongoose Web Server
risk 0.61cvss 8.8epss 0.04
Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the authentication of users for requests that modify Mongoose.conf via a request to __mg_admin?save. NOTE: this issue can be leveraged to execute arbitrary code…
CVE-2016-0732HigSep 7, 2017
Cloudfoundry
Elastic Runtime
risk 0.57cvss 8.8epss 0.01
The identity zones feature in Pivotal Cloud Foundry 208 through 229; UAA 2.0.0 through 2.7.3 and 3.0.0; UAA-Release 2 through 4, when configured with multiple identity zones; and Elastic Runtime 1.6.0 through 1.6.13 allows remote authenticated users with privileges in one zone…
CVE-2015-3250HigSep 7, 2017
Apache
Directory LDAP API
risk 0.42cvss 7.5epss 0.05
Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors.