CVEs published April 25, 2017
37 CVEs were published on April 25, 2017: 0 critical, 0 high.
- Published
- 37
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 37
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- 5
- Oracle Marketing
- 5
- IBM Domino
- 1
- IBM UrbanCode Deploy
- 1
- Linux kernel
- 1
- McAfee VirusScan Enterprise
- 1
- Oracle One-to-One Fulfillment
- 1
- salt
- 1
Medium, low and unrated 37
- CVE-2017-8217TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n have too permissive iptables rules, e.g., SNMP is not
- CVE-2017-8218vsftpd on TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n has a backdoor admin account with the 1234
- CVE-2017-8219TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow DoSing the HTTP server via a crafted Cookie hea
- CVE-2017-8220TP-Link C2 and C20i devices through firmware 0.9.1 4.2 v0032.0 Build 160706 Rel.37961n allow remote code execution with a single HTTP reques
- CVE-2017-8221Wireless IP Camera (P2P) WIFICAM devices rely on a cleartext UDP tunnel protocol (aka the Cloud feature) for communication between an Androi
- CVE-2017-8222Wireless IP Camera (P2P) WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate stored in /system/www/
- CVE-2017-8223On Wireless IP Camera (P2P) WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streaming without authentica
- CVE-2017-8224Wireless IP Camera (P2P) WIFICAM devices have a backdoor root account that can be accessed with TELNET.
- CVE-2017-8225On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked.
- CVE-2017-3342Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Marketing
- CVE-2017-3345Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Marketing
- CVE-2017-3347Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Marketing
- CVE-2017-3355Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Marketing
- CVE-2017-3356Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Marketing
- CVE-2017-3434Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Audience workbench).Oracle One-to-One Fulfillment
- CVE-2017-8115Directory traversal in setup/processors/url_search.php (aka the search page of an unused processor) in MODX Revolution 2.5.7 might allow rem
- CVE-2017-1149IBM UrbanCode Deploy (UCD) 6.0, 6.1, and 6.2 is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error whIBM UrbanCode Deploy
- CVE-2017-1274IBM Domino 8.5.3, and 9.0 is vulnerable to a stack based overflow in the IMAP service that could allow an authenticated attacker to execute IBM Domino
- CVE-2017-7983In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), mail sent using the JMail API leaked the used PHPMailer version in the mail headers.
- CVE-2017-7984In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering leads to XSS in the template manager component.
- CVE-2017-7985In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of multibyte characters leads to XSS vulnerabilities in various compon
- CVE-2017-7986In Joomla! 1.5.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of specific HTML attributes leads to XSS vulnerabilities in various co
- CVE-2017-7987In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate escaping of file and folder names leads to XSS vulnerabilities in the template m
- CVE-2017-7988In Joomla! 1.6.0 through 3.6.5 (fixed in 3.7.0), inadequate filtering of form contents allows overwriting the author of an article.
- CVE-2017-7989In Joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate MIME type checks allowed low-privilege users to upload swf files even if they we
- CVE-2017-8057In Joomla! 3.4.0 through 3.6.5 (fixed in 3.7.0), multiple files caused full path disclosures on systems with enabled error reporting.
- CVE-2017-8109The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permisssalt
- CVE-2017-8110www.modified-shop.org modified eCommerce Shopsoftware 2.0.2.2 rev 10690 has XXE in api/it-recht-kanzlei/api-it-recht-kanzlei.php.
- CVE-2016-8030A memory corruption vulnerability in Scriptscan COM Object in McAfee VirusScan Enterprise 8.8 Patch 8 and earlier allows remote attackers toMcAfee VirusScan Enterprise
- CVE-2017-5625In OxygenOS before 4.0.3 on OnePlus 3 and 3T devices, an unauthorized attacker can cause a locked bootloader to partially dump the ciphertex
- CVE-2017-7221OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to
- CVE-2017-7477Heap-based buffer overflow in drivers/net/macsec.c in the MACsec module in the Linux kernel through 4.10.12 allows attackers to cause a deniLinux kernel
- CVE-2017-5047An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remGoogle Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5048An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remGoogle Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5049An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remGoogle Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5050An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remGoogle Chrome prior to 57.0.2987.98 for Mac, Windows and Li…
- CVE-2017-5051An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remGoogle Chrome prior to 57.0.2987.98 for Mac, Windows and Li…