CVEs published April 24, 2017
281 CVEs were published on April 24, 2017: 0 critical, 2 high. 2 are now in CISA KEV.
- Published
- 281
- Critical
- 0
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 279
- Now in CISA KEV
- 2
- Fix available
- 41
Most affected products
- Oracle MySQL Server
- 23
- Juniper Networks NorthStar Controller Application
- 19
- Oracle WebCenter Sites
- 15
- Oracle Berkeley DB
- 14
- Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- 10
- Oracle Solaris Operating System
- 10
- Oracle Automatic Service Request
- 9
- Oracle VM VirtualBox
- 9
- Oracle FLEXCUBE Private Banking
- 8
- Oracle Java
- 8
High 2
- CVE-2017-5030Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for AndroidGoogle Chrome prior to 57.0.2987.98 for Linux, Windows and…
- CVE-2017-3506Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).Oracle WebLogic Server
Medium, low and unrated 279
- CVE-2017-5029The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, aGoogle Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5031A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory reMozilla Firefox ESR · Mozilla Firefox
- CVE-2017-5032PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attackeGoogle Chrome prior to 57.0.2987.98 for Windows
- CVE-2017-5033Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP resGoogle Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5034A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of boundGoogle Chrome prior to 57.0.2987.98 for Linux and Windows
- CVE-2017-5035Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate infoGoogle Chrome prior to 57.0.2987.98 for Windows and Mac
- CVE-2017-5036A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remoteGoogle Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5037An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remGoogle Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5038Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remoteGoogle Chrome prior to 57.0.2987.98 for Linux, Windows and…
- CVE-2017-5039A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remoteGoogle Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5040V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which allGoogle Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5041Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect inforGoogle Chrome prior to
- CVE-2017-5042Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via SGoogle Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5043Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remoteGoogle Chrome prior to 57.0.2987.98 for Linux, Windows and…
- CVE-2017-5044Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for AGoogle Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5045XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5046V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, whiGoogle Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-8106The handle_invept function in arch/x86/kvm/vmx.c in the Linux kernel 3.12 through 3.15 allows privileged KVM guest OS users to cause a denia
- CVE-2016-6915Stack-based buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, a
- CVE-2010-1776Find My iPhone on iOS 2.0 through 3.1.3 for iPhone 3G and later and iOS 2.1 through 3.1.3 for iPod touch (2nd generation) and later, when Fi
- CVE-2011-3428Buffer overflow in QuickTime before 7.7.1 for Windows allows remote attackers to execute arbitrary code.
- CVE-2011-3438WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service (process crash) or arbitrary code execution.
- CVE-2016-5016Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCForg.cloudfoundry.identity:cloudfoundry-identity-server
- CVE-2016-5551Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition).Oracle Solaris Cluster
- CVE-2016-6902lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.limited-shell
- CVE-2016-6903lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.limited-shell
- CVE-2016-6916Integer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield T
- CVE-2016-6917Buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Ta
- CVE-2017-3230Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder).Oracle Fusion Middleware MapViewer
- CVE-2017-3232Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager).Oracle Automatic Service Request
- CVE-2017-3233Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager).Oracle Automatic Service Request
- CVE-2017-3234Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager).Oracle Automatic Service Request
- CVE-2017-3237Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager).Oracle Automatic Service Request
- CVE-2017-3254Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications (subcomponent: Security).Oracle Retail Invoice Matching
- CVE-2017-3288Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust).Oracle FLEXCUBE Investor Servicing
- CVE-2017-3304Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD).Oracle MySQL Cluster
- CVE-2017-3305Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API).Oracle MySQL Server
- CVE-2017-3306Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server).Oracle MySQL Enterprise Monitor
- CVE-2017-3307Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server).Oracle MySQL Enterprise Monitor
- CVE-2017-3308Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).Oracle MySQL Server
- CVE-2017-3309Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL Server
- CVE-2017-3329Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Thread Pooling).Oracle MySQL Server
- CVE-2017-3331Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).Oracle MySQL Server
- CVE-2017-3337Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Marketing
- CVE-2017-3393Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: Interaction History).Oracle Advanced Outbound Telephony
- CVE-2017-3432Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Audience workbench).Oracle One-to-One Fulfillment
- CVE-2017-3450Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached).Oracle MySQL Server
- CVE-2017-3451Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Web).Oracle Retail Open Commerce Platform Cloud Service
- CVE-2017-3452Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL Server
- CVE-2017-3453Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL Server
- CVE-2017-3454Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB).Oracle MySQL Server
- CVE-2017-3455Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).Oracle MySQL Server
- CVE-2017-3456Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).Oracle MySQL Server
- CVE-2017-3457Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).Oracle MySQL Server
- CVE-2017-3458Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).Oracle MySQL Server
- CVE-2017-3459Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL Server
- CVE-2017-3460Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in).Oracle MySQL Server
- CVE-2017-3461Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).Oracle MySQL Server
- CVE-2017-3462Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).Oracle MySQL Server
- CVE-2017-3463Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).Oracle MySQL Server
- CVE-2017-3464Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).Oracle MySQL Server
- CVE-2017-3465Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).Oracle MySQL Server
- CVE-2017-3467Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API).Oracle MySQL Server
- CVE-2017-3468Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption).Oracle MySQL Server
- CVE-2017-3469Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security : Encryption).Oracle MySQL Workbench
- CVE-2017-3470Vulnerability in the Oracle Communications Security Gateway component of Oracle Communications Applications (subcomponent: Network).Oracle Communications Security Gateway
- CVE-2017-3471Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous).Oracle FLEXCUBE Private Banking
- CVE-2017-3472Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Portfolio ManagementOracle FLEXCUBE Private Banking
- CVE-2017-3473Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous).Oracle FLEXCUBE Private Banking
- CVE-2017-3474Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zone).Oracle Solaris Operating System
- CVE-2017-3475Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous).Oracle FLEXCUBE Private Banking
- CVE-2017-3476Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous).Oracle FLEXCUBE Private Banking
- CVE-2017-3477Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous).Oracle FLEXCUBE Private Banking
- CVE-2017-3478Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous).Oracle FLEXCUBE Private Banking
- CVE-2017-3479Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous).Oracle FLEXCUBE Private Banking
- CVE-2017-3480Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2017-3481Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2017-3482Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2017-3483Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2017-3484Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2017-3485Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2017-3486Vulnerability in the SQL*Plus component of Oracle Database Server.Oracle SQL*Plus
- CVE-2017-3487Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust).Oracle FLEXCUBE Investor Servicing
- CVE-2017-3488Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust).Oracle FLEXCUBE Investor Servicing
- CVE-2017-3489Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Security ManagemeOracle FLEXCUBE Investor Servicing
- CVE-2017-3490Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2017-3491Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2017-3492Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2017-3493Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2017-3494Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Retail Teller).Oracle FLEXCUBE Universal Banking
- CVE-2017-3495Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Pre-Login).Oracle FLEXCUBE Direct Banking
- CVE-2017-3496Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2017-3497Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Remote Administration Daemon).Oracle Solaris Operating System
- CVE-2017-3498Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).Oracle Solaris Operating System
- CVE-2017-3499Vulnerability in the Oracle Social Network component of Oracle Fusion Middleware (subcomponent: Android Client).Oracle Social Network
- CVE-2017-3500Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration).Oracle Primavera Gateway
- CVE-2017-3501Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform).Oracle Primavera Unifier
- CVE-2017-3502Vulnerability in the PeopleSoft Enterprise FIN Receivables component of Oracle PeopleSoft Products (subcomponent: Receivables).Oracle PeopleSoft Enterprise FIN Receivables
- CVE-2017-3503Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web AcOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2017-3504Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager).
- CVE-2017-3505Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager).Oracle Automatic Service Request
- CVE-2017-3507Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: Web Console Design).Oracle Service Bus
- CVE-2017-3508Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration).Oracle Primavera Gateway
- CVE-2017-3509Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking).Oracle Java
- CVE-2017-3510Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized NIC driver).Oracle Solaris Operating System
- CVE-2017-3511Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE).Oracle Java
- CVE-2017-3512Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT).Oracle Java
- CVE-2017-3513Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2017-3514Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT).Oracle Java
- CVE-2017-3515Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: User Name/Password Management).Oracle User Management
- CVE-2017-3516Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized NIC driver).Oracle Solaris Operating System
- CVE-2017-3517Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime SEC).Oracle JD Edwards EnterpriseOne Tools
- CVE-2017-3518Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: Discovery FrameworkOracle Enterprise Manager Base Platform
- CVE-2017-3519Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-3520Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-3521Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products (subcomponent: Supplier Registration).Oracle PeopleSoft Enterprise SCM Purchasing
- CVE-2017-3522Vulnerability in the PeopleSoft Enterprise SCM eSupplier Connection component of Oracle PeopleSoft Products (subcomponent: Vendor).Oracle PeopleSoft Enterprise SCM eSupplier Connection
- CVE-2017-3523Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J).Oracle MySQL Connectors · mysql:mysql-connector-java
- CVE-2017-3524Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component of Oracle PeopleSoft Products (subcomponent: Bidder RegistrationOracle PeopleSoft Enterprise SCM Strategic Sourcing
- CVE-2017-3525Vulnerability in the PeopleSoft Enterprise SCM Service Procurement component of Oracle PeopleSoft Products (subcomponent: Usability).Oracle PeopleSoft Enterprise SCM Services Procurement
- CVE-2017-3526Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP).Oracle Java
- CVE-2017-3527Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-3528Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datepOracle Applications Framework
- CVE-2017-3530Vulnerability in the Oracle Transportation Manager component of Oracle Supply Chain Products Suite (subcomponent: Security).Oracle Transportation Management
- CVE-2017-3531Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Servlet Runtime).Oracle WebLogic Server
- CVE-2017-3532Vulnerability in the Oracle Retail Warehouse Management System component of Oracle Retail Applications (subcomponent: Security).Oracle Retail Warehouse Management System
- CVE-2017-3533Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).Oracle Java
- CVE-2017-3534Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2017-3535Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2017-3536Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-3537Vulnerability in the Oracle Real-Time Scheduler component of Oracle Utilities Applications (subcomponent: Mobile Communications Platform).Oracle Real-Time Scheduler
- CVE-2017-3538Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder).Oracle VM VirtualBox
- CVE-2017-3539Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security).Oracle Java
- CVE-2017-3540Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server).Oracle WebCenter Sites
- CVE-2017-3541Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server).Oracle WebCenter Sites
- CVE-2017-3542Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server).Oracle WebCenter Sites
- CVE-2017-3543Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server).Oracle WebCenter Sites
- CVE-2017-3544Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).Oracle Java
- CVE-2017-3545Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Blob Server).Oracle WebCenter Sites
- CVE-2017-3546Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-3547Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-3548Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-3549Vulnerability in the Oracle Scripting component of Oracle E-Business Suite (subcomponent: Scripting Administration).Oracle Scripting
- CVE-2017-3550Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: Admin Console).Oracle Customer Interaction History
- CVE-2017-3551Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Smartcard Libraries).Oracle Solaris Operating System
- CVE-2017-3552Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Room ImaOracle Hospitality OPERA 5 Property Services
- CVE-2017-3553Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Rules Engine).Oracle Identity Manager
- CVE-2017-3554Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover).Oracle WebCenter Sites
- CVE-2017-3555Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite (subcomponent: Self Registration).Oracle iReceivables
- CVE-2017-3556Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: File Management).Oracle Application Object Library
- CVE-2017-3557Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server).Oracle One-to-One Fulfillment
- CVE-2017-3558Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2017-3559Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2017-3560Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OXI Interface)Oracle Hospitality OPERA 5 Property Services
- CVE-2017-3561Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2017-3563Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2017-3564Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC).Oracle Solaris Operating System
- CVE-2017-3565Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC).Oracle Solaris Operating System
- CVE-2017-3567Vulnerability in the OJVM component of Oracle Database Server.Oracle Database
- CVE-2017-3568Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA PrintingOracle Hospitality OPERA 5 Property Services
- CVE-2017-3569Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA BusinessOracle Hospitality OPERA 5 Property Services
- CVE-2017-3570Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: eSettlements).Oracle PeopleSoft Enterprise FIN eSettlements
- CVE-2017-3571Vulnerability in the PeopleSoft Enterprise SCM eBill Payment component of Oracle PeopleSoft Products (subcomponent: Security).Oracle PeopleSoft Enterprise SCM eBill Payment
- CVE-2017-3572Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce (subcomponent: MDEX).Commerce Guided Search / Oracle Commerce Experience Manager
- CVE-2017-3573Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA PrintingOracle Hospitality OPERA 5 Property Services
- CVE-2017-3574Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA License Oracle Hospitality OPERA 5 Property Services
- CVE-2017-3575Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2017-3576Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2017-3577Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products (subcomponent: Frameworks).Oracle PeopleSoft Enterprise CS Campus Community
- CVE-2017-3578Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2017-3579Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web AcOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2017-3580Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2017-3581Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager).Oracle Automatic Service Request
- CVE-2017-3582Vulnerability in the Oracle SuperCluster Specific Software component of Oracle Sun Systems Products Suite (subcomponent: Backup/Restore UtilOracle SuperCluster Specific Software
- CVE-2017-3583Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web AcOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2017-3584Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2017-3585Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface subsystOracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2017-3586Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J).Oracle MySQL Connectors · mysql:mysql-connector-java
- CVE-2017-3587Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder).Oracle VM VirtualBox
- CVE-2017-3589Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J).Oracle MySQL Connectors · mysql:mysql-connector-java
- CVE-2017-3590Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python).Oracle MySQL Connectors · mysql-connector-python
- CVE-2017-3591Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover).Oracle WebCenter Sites
- CVE-2017-3592Vulnerability in the Oracle Payables component of Oracle E-Business Suite (subcomponent: Self Service Manager).Oracle Payroll
- CVE-2017-3593Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).Oracle WebCenter Sites
- CVE-2017-3594Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).Oracle WebCenter Sites
- CVE-2017-3595Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).Oracle WebCenter Sites
- CVE-2017-3596Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).Oracle WebCenter Sites
- CVE-2017-3597Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).Oracle WebCenter Sites
- CVE-2017-3598Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).Oracle WebCenter Sites
- CVE-2017-3599Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth).
- CVE-2017-3600Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump).Oracle MySQL Server
- CVE-2017-3601Vulnerability in the Oracle API Gateway component of Oracle Fusion Middleware (subcomponent: Oracle API Gateway).Oracle API Gateway
- CVE-2017-3602Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).Oracle WebCenter Sites
- CVE-2017-3603Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).Oracle WebCenter Sites
- CVE-2017-3604Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2017-3605Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2017-3606Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2017-3607Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2017-3608Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2017-3609Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2017-3610Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2017-3611Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2017-3612Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2017-3613Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2017-3614Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2017-3615Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2017-3616Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2017-3617Vulnerability in the Data Store component of Oracle Berkeley DB.Oracle Berkeley DB
- CVE-2017-3618Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager).Oracle Automatic Service Request
- CVE-2017-3619Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager).Oracle Automatic Service Request
- CVE-2017-3620Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager).Oracle Automatic Service Request
- CVE-2017-3621Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: IPC Frameworks).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2017-3622Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment (CDE)).Oracle Solaris Operating System
- CVE-2017-3623Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC).Oracle Solaris Operating System
- CVE-2017-3625Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server).Oracle WebCenter Content
- CVE-2017-3626Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces).Oracle GlassFish Server
- CVE-2015-7245Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read
- CVE-2015-7246D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw
- CVE-2015-7247D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes
- CVE-2015-7568SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the account credentials o
- CVE-2015-7569SQL injection vulnerability in "yeager/y.php/tab_USERLIST" in Yeager CMS 1.2.1 allows local users to execute arbitrary SQL commands via the
- CVE-2015-7570Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbound requests and enum
- CVE-2016-3076Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of servipillow
- CVE-2016-3114Kallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or delete comments by leveraging read access.
- CVE-2016-3691Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.kallithea
- CVE-2016-4313Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a ..
- CVE-2017-2322A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1, may allow an aJuniper Networks NorthStar Controller Application
- CVE-2017-5191An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because Access Gateway Error pages do not validate theNetIQ Access Manager 4.2 and NetIQ Access Manager
- CVE-2017-7723XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body.
- CVE-2017-8098e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing, meta-changing, and settings-changing.
- CVE-2017-8099There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's statu
- CVE-2017-8100There is CSRF in the CopySafe Web Protection plugin before 2.6 for WordPress, allowing attackers to change plugin settings.
- CVE-2017-8101There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request.
- CVE-2017-8102Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor
- CVE-2017-8103In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event.
- CVE-2017-8104In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter.
- CVE-2017-8105FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1_decoder_parse_charstrings f
- CVE-2017-1000357Denial of Service attack when the switch rejects to receive packets from the controller.
- CVE-2017-1000358Controller throws an exception and does not allow user to add subsequent flow for a particular switch.
- CVE-2017-1000359Java out of memory error and significant increase in resource consumption.
- CVE-2017-1000360StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql.org.opendaylight.controller:releasepom
- CVE-2017-1000361DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight.org.opendaylight.controller:releasepom
- CVE-2017-2312On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE (Routing EnginJuniper Networks Junos OS with LDP enabled
- CVE-2017-2313Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd Juniper Networks Junos OS with BGP enabled
- CVE-2017-2315On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered tJuniper Networks Junos OS on EX series Ethernet Switches wi…
- CVE-2017-2316A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authJuniper Networks NorthStar Controller Application
- CVE-2017-2317A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unJuniper Networks NorthStar Controller Application
- CVE-2017-2318A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated maliciJuniper Networks NorthStar Controller Application
- CVE-2017-2319A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker toJuniper Networks NorthStar Controller Application
- CVE-2017-2320A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unpJuniper Networks NorthStar Controller Application
- CVE-2017-2321A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unpJuniper Networks NorthStar Controller Application
- CVE-2017-2323A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malJuniper Networks NorthStar Controller Application
- CVE-2017-2324A command injection vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a netJuniper Networks NorthStar Controller Application
- CVE-2017-2325A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authJuniper Networks NorthStar Controller Application
- CVE-2017-2326An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allowJuniper Networks NorthStar Controller Application
- CVE-2017-2327A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an auJuniper Networks NorthStar Controller Application
- CVE-2017-2328An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unJuniper Networks NorthStar Controller Application
- CVE-2017-2329An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may Juniper Networks NorthStar Controller Application
- CVE-2017-2330A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unJuniper Networks NorthStar Controller Application
- CVE-2017-2331A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a netwoJuniper Networks NorthStar Controller Application
- CVE-2017-2332An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may Juniper Networks NorthStar Controller Application
- CVE-2017-2333A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may Juniper Networks NorthStar Controller Application
- CVE-2017-2334An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a netJuniper Networks NorthStar Controller Application
- CVE-2017-2340On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber ManagemeJuniper Networks Junos OS on M/MX platforms where Enhanced…
- CVE-2017-8085In Exponent CMS before 2.4.1 Patch #5, XSS in elFinder is possible in framework/modules/file/connector/elfinder.php.
- CVE-2017-7852D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the d
- CVE-2017-7944XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in page_dbsettings.php.
- CVE-2007-6761drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize videobuf_mapping data structures, which allows
- CVE-2010-5321Memory leak in drivers/media/video/videobuf-core.c in the videobuf subsystem in the Linux kernel 2.6.x through 4.x allows local users to cau
- CVE-2010-5329The video_usercopy function in drivers/media/video/v4l2-ioctl.c in the Linux kernel before 2.6.39 relies on the count value of a v4l2_ext_co
- CVE-2014-9654The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 4
- CVE-2014-9680sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arb
- CVE-2015-0104IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8
- CVE-2015-0107IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8
- CVE-2015-1521analyzer/protocol/dnp3/DNP3.cc in Bro before 2.3.2 does not properly handle zero values of a packet length, which allows remote attackers to
- CVE-2015-1522analyzer/protocol/dnp3/DNP3.cc in Bro before 2.3.2 does not reject certain non-zero values of a packet length, which allows remote attackers
- CVE-2015-8109Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by making a prediction of
- CVE-2015-8110Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by navigating to (1) "Clic
- CVE-2017-8082concrete5 8.1.0 has CSRF in Thumbnail Editor in the File Manager, which allows remote attackers to disable the entire installation by merely