CVEs published April 29, 2017
9 CVEs were published on April 29, 2017: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- com.thoughtworks.xstream:xstream
- 1
Medium, low and unrated 9
- CVE-2017-8325The iw_process_cols_to_intermediate function in imagew-main.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to
- CVE-2017-8326libimageworsener.a in ImageWorsener before 1.3.1 has "left shift cannot be represented in type int" undefined behavior issues, which might a
- CVE-2017-8327The bmpr_read_uncompressed function in imagew-bmp.c in libimageworsener.a in ImageWorsener before 1.3.1 allows remote attackers to cause a d
- CVE-2017-7957XStream through 1.4.9, when a certain denyTypes workaround is not used, mishandles attempts to create an instance of the primitive type 'voicom.thoughtworks.xstream:xstream
- CVE-2017-8114Roundcube Webmail allows arbitrary password resets by authenticated users.
- CVE-2017-6553Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the polic
- CVE-2017-7981Tuleap before 9.7 allows command injection via the PhpWiki 1.3.10 SyntaxHighlighter plugin.
- CVE-2017-7644The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, and 7.1.x before 7.1.9 allows remote authenticat
- CVE-2017-7945The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9, and 8.x before 8.0.2