CVEs published April 25, 2017
37 CVEs were published on April 25, 2017: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 37
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 37
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- 5
- Oracle Marketing
- 5
- IBM Domino
- 1
- IBM UrbanCode Deploy
- 1
- Linux kernel
- 1
- McAfee VirusScan Enterprise
- 1
- Oracle One-to-One Fulfillment
- 1
- salt
- 1
Medium, low and unrated 37
- CVE-2017-8217TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n have too permissive iptables rules, e.g., SNMP is…
- CVE-2017-8218vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the…
- CVE-2017-8219TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow DoSing the HTTP server via a crafted Cookie…
- CVE-2017-8220TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP…
- CVE-2017-8221Wireless IP Camera (P2P) WIFICAM devices rely on a cleartext UDP tunnel protocol (aka the Cloud feature) for communication between an…
- CVE-2017-8222Wireless IP Camera (P2P) WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate stored in…
- CVE-2017-8223On Wireless IP Camera (P2P) WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streaming without…
- CVE-2017-8224Wireless IP Camera (P2P) WIFICAM devices have a backdoor root account that can be accessed with TELNET.
- CVE-2017-8225On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked.
- CVE-2017-3342Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Marketing
- CVE-2017-3345Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Marketing
- CVE-2017-3347Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Marketing
- CVE-2017-3355Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Marketing
- CVE-2017-3356Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Marketing
- CVE-2017-3434Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Audience workbench).Oracle One-to-One Fulfillment
- CVE-2017-8115Directory traversal in setup/processors/url_search.php (aka the search page of an unused processor) in MODX Revolution 2.5.7 might allow…
- CVE-2017-1149IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error…IBM UrbanCode Deploy
- CVE-2017-1274IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated attacker to…IBM Domino
- CVE-2017-7983In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), mail sent using the JMail API leaked the used PHPMailer version in the mail headers.
- CVE-2017-7984In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering leads to XSS in the template manager component.
- CVE-2017-7985In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of multibyte characters leads to XSS vulnerabilities in various…
- CVE-2017-7986In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various…
- CVE-2017-7987In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate escaping of file and folder names leads to XSS vulnerabilities in the template…
- CVE-2017-7988In Joomla! 1.6.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of form contents allows overwriting the author of an article.
- CVE-2017-7989In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate MIME type checks allowed low-privilege users to upload swf files even if they…
Show all 37 entriesShow fewer entries
- CVE-2017-8057In Joomla! 3.4.0 through 3.6.5 (fixed in 3.7.0), multiple files caused full path disclosures on systems with enabled error reporting.
- CVE-2017-8109The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting…salt
- CVE-2017-8110www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php.
- CVE-2016-8030A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers…McAfee VirusScan Enterprise
- CVE-2017-5625In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the…
- CVE-2017-7221OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users…
- CVE-2017-7477Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a…Linux kernel
- CVE-2017-5047An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a…Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5048An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a…Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5049An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a…Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5050An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a…Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5051An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a…Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…