CVEs published May 1, 2017
31 CVEs were published on May 1, 2017: 1 critical, 0 high.
- Published
- 31
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 30
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- craftcms/cms
- 3
- genix/cms
- 3
- F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, E… +2
- 1
- LXC before 1.0.9 and 2.x before
- 1
Critical 1
Medium, low and unrated 30
- CVE-2017-8403360fly 4K cameras allow unauthenticated Wi-Fi password changes and complete access with REST by using the Bluetooth Low Energy pairing proce
- CVE-2017-6564On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the Guest user, which contains the lowest privileges, can post to the idSourceFil
- CVE-2017-6565On Franklin Fueling Systems TS-550 evo 2.3.0.7332 devices, the roleDiag user, which can be obtained by exploiting CVE-2013-7247, has the abi
- CVE-2017-8400In SWFTools 0.9.2, an out-of-bounds write of heap data can occur in the function png_load() in lib/png.c:755.
- CVE-2017-8401In SWFTools 0.9.2, an out-of-bounds read of heap data can occur in the function png_load() in lib/png.c:724.
- CVE-2017-8392The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 becau
- CVE-2017-8393The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a global buffer over-read error
- CVE-2017-8394The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 4 due t
- CVE-2017-8395The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 beca
- CVE-2017-8396The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 becau
- CVE-2017-8397The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 and a
- CVE-2017-8398dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corrupt binary.
- CVE-2017-8399PCRE2 before 10.30 has an out-of-bounds write caused by a stack-based buffer overflow in pcre2_match.c, related to a "pattern with very many
- CVE-2017-8376GeniXCMS 1.0.2 has XSS triggered by an authenticated comment that is mishandled during a mouse operation by an administrator.genix/cms
- CVE-2017-8377GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid parameter.genix/cms
- CVE-2017-8388GeniXCMS 1.0.2 allows remote attackers to bypass the alertDanger MSG_USER_EMAIL_EXIST protection mechanism via a register.php?act=edit&id=1 genix/cms
- CVE-2017-6128An attacker may be able to cause a denial-of-service (DoS) attack against the sshd component in F5 BIG-IP, Enterprise Manager, BIG-IQ, and iF5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, E… +2
- CVE-2017-5631An issue was discovered in KMCIS CaseAware.
- CVE-2016-8649lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptLXC before 1.0.9 and 2.x before
- CVE-2017-8383Craft CMS before 2.6.2976 does not properly restrict viewing the contents of files in the craft/app/ folder.craftcms/cms
- CVE-2017-8384Craft CMS before 2.6.2976 allows XSS attacks because an array returned by HttpRequestService::getSegments() and getActionSegments() need notcraftcms/cms
- CVE-2017-8385Craft CMS before 2.6.2976 does not prevent modification of the URL in a forgot-password email message.craftcms/cms
- CVE-2016-10349The archive_le32dec function in archive_endian.h in libarchive 3.2.2 allows remote attackers to cause a denial of service (heap-based buffer
- CVE-2016-10350The archive_read_format_cab_read_header function in archive_read_support_format_cab.c in libarchive 3.2.2 allows remote attackers to cause a
- CVE-2016-10351Telegram Desktop 0.10.19 uses 0755 permissions for $HOME/.TelegramDesktop, which allows local users to obtain sensitive authentication infor
- CVE-2017-6520The Multicast DNS (mDNS) responder used in BOSE Soundtouch 30 inadvertently responds to IPv4 unicast queries with source addresses that are
- CVE-2017-8372The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b, if NDEBUG is omitted, allows remote attackers to cause a denial of se
- CVE-2017-8373The mad_layer_III function in layer3.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based buffe
- CVE-2017-8374The mad_bit_skip function in bit.c in Underbit MAD libmad 0.15.1b allows remote attackers to cause a denial of service (heap-based buffer ov
- CVE-2017-8378Heap-based buffer overflow in the PdfParser::ReadObjects function in base/PdfParser.cpp in PoDoFo 0.9.5 allows remote attackers to cause a d