CVEs published May 2, 2017
21 CVEs were published on May 2, 2017: 1 critical, 0 high. 1 is now in CISA KEV.
- Published
- 21
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 20
- Now in CISA KEV
- 1
- Fix available
- 2
Most affected products
- Gnulib before 2017-04-26
- 1
- Intel Active Mangement Technology, Intel Small Business Tec…
- 1
- rack-mini-profiler
- 1
- rubocop
- 1
- The RXVT Project rxvt
- 1
Critical 1
Medium, low and unrated 20
- CVE-2014-9940The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or ca
- CVE-2015-9004kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privileges via a crafted
- CVE-2017-0331An elevation of privilege vulnerability in the NVIDIA video driver could enable a local malicious application to execute arbitrary code with
- CVE-2017-7476Gnulib before 2017-04-26 has a heap-based buffer overflow with the TZ environment variable.Gnulib before 2017-04-26
- CVE-2017-8421The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28
- CVE-2017-7216The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to obtain sensitive information via
- CVE-2015-8257The devtools.sh script in AXIS network cameras allows remote authenticated users to execute arbitrary commands via shell metacharacters in t
- CVE-2016-10243TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf co
- CVE-2016-4442The rack-mini-profiler gem before 0.10.1 for Ruby allows remote attackers to obtain sensitive information about allocated strings and objectrack-mini-profiler
- CVE-2016-4467The C client and C-based client bindings in the Apache Qpid Proton library before 0.13.1 on Windows do not properly verify that the server h
- CVE-2016-5006The Cloud Controller in Cloud Foundry before 239 logs user-provided service objects at creation, which allows attackers to obtain sensitive
- CVE-2016-5063The RSCD agent in BMC Server Automation before 8.6 SP1 Patch 2 and 8.7 before Patch 3 on Windows might allow remote attackers to bypass auth
- CVE-2016-5810upAdminPg.asp in Advantech WebAccess before 8.1_20160519 allows remote authenticated administrators to obtain sensitive password information
- CVE-2017-6551Pexip Infinity before 14.2 allows remote attackers to cause a denial of service (service restart) or execute arbitrary code via vectors rela
- CVE-2017-7440Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and Mac 9.2.0 through 9.2.2, when e-mail preview
- CVE-2017-7483Rxvt 2.7.10 is vulnerable to a denial of service attack by passing the value -2^31 inside a terminal escape code, which results in a non-invThe RXVT Project rxvt
- CVE-2017-8086Memory leak in the v9fs_list_xattr function in hw/9pfs/9p-xattr.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cau
- CVE-2017-8112hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and CPU
- CVE-2017-8418RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to otherrubocop
- CVE-2017-8419LAME through 3.99.5 relies on the signed integer data type for values in a WAV or AIFF header, which allows remote attackers to cause a deni