CVEs published April 22, 2017
6 CVEs were published on April 22, 2017: 0 critical, 0 high.
- Published
- 6
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- craftcms/cms
- 1
Medium, low and unrated 6
- CVE-2017-8054The function PdfPagesTree::GetPageNodeFromArray in PdfPageTree.cpp:464 in PoDoFo 0.9.5 allows remote attackers to cause a denial of service
- CVE-2017-8055WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler.
- CVE-2017-8056WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent.
- CVE-2017-8053PoDoFo 0.9.5 allows denial of service (infinite recursion and stack consumption) via a crafted PDF file in PoDoFo::PdfParser::ReadDocumentSt
- CVE-2017-7991Exponent CMS 2.4.1 and earlier has SQL injection via a base64 serialized API key (apikey parameter) in the api function of framework/modules
- CVE-2017-8052Craft CMS before 2.6.2974 allows XSS attacks.craftcms/cms