CVEs published April 18, 2017
14 CVEs were published on April 18, 2017: 0 critical, 0 high.
- Published
- 14
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 14
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- Apache Software Foundation Apache CXF · org.apache.cxf:cxf-…
- 2
- Apache Software Foundation Apache Batik · org.apache.xmlgra…
- 1
- Apache Software Foundation Apache FOP · org.apache.xmlgraph…
- 1
- mantisbt/mantisbt
- 1
- passenger
- 1
Medium, low and unrated 14
- CVE-2016-10345In Phusion Passenger before 5.1.0, a known /tmp filename was used during passenger-install-nginx-module execution, which could allow local apassenger
- CVE-2017-7946The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after
- CVE-2017-7939The read_next_pam_token function in imagew-pnm.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to cause a denial of s
- CVE-2017-7940The iw_read_gif_file function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.0 allows remote attackers to consume an amount of a
- CVE-2017-7941The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted fil
- CVE-2017-7942The ReadAVSImage function in avs.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted fil
- CVE-2017-7943The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 allows remote attackers to consume an amount of available memory via a crafted fil
- CVE-2017-7897A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2) Timeline include page, used in My View (my_view_page.php) anmantisbt/mantisbt
- CVE-2017-5653JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encryptApache Software Foundation Apache CXF · org.apache.cxf:cxf-…
- CVE-2017-5656Apache CXF's STSClient before 3.1.11 and 3.0.13 uses a flawed way of caching tokens that are associated with delegation tokens, which means Apache Software Foundation Apache CXF · org.apache.cxf:cxf-…
- CVE-2017-7896Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.
- CVE-2017-5661In Apache FOP before 2.2, files lying on the filesystem of the server which uses FOP can be revealed to arbitrary users who send maliciouslyApache Software Foundation Apache FOP · org.apache.xmlgraph…
- CVE-2017-5662In Apache Batik before 1.9, files lying on the filesystem of the server which uses batik can be revealed to arbitrary users who send malicioApache Software Foundation Apache Batik · org.apache.xmlgra…
- CVE-2017-7645The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel through 4.10.11 allows remote attackers to cause a denial of service (syste