CVEs published May 4, 2017
19 CVEs were published on May 4, 2017: 0 critical, 0 high.
- Published
- 19
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 19
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- OpenSSL
- 6
- EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 b…
- 1
- genix/cms
- 1
Medium, low and unrated 19
- CVE-2017-8768Atlassian SourceTree v2.5c and prior are affected by a command injection in the handling of the sourcetree:// scheme.
- CVE-2016-7055There is a carry propagating bug in the Broadwell-specific Montgomery multiplication procedure in OpenSSL 1.0.2 and 1.1.0 before 1.1.0c that
- CVE-2016-7053CMS Null dereferenceOpenSSL
- CVE-2016-7054ChaCha20/Poly1305 heap-buffer-overflowOpenSSL
- CVE-2017-3730Bad (EC)DHE parameters cause a client crashOpenSSL
- CVE-2017-3731Truncated packet could crash via OOB readOpenSSL
- CVE-2017-3732BN_mod_exp may produce incorrect results on x86_64OpenSSL
- CVE-2017-3733Encrypt-Then-Mac renegotiation crashOpenSSL
- CVE-2017-8778GitLab before 8.14.9, 8.15.x before 8.15.6, and 8.16.x before 8.16.5 has XSS via a SCRIPT element in an issue attachment or avatar that is a
- CVE-2017-4983EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 is affected by a privilege escalation vulnerability that may potentEMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 b…
- CVE-2017-8295WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for remote attackers to re
- CVE-2017-8779rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider the maximum RPC data
- CVE-2017-8780GeniXCMS 1.0.2 has XSS triggered by a comment that is mishandled during a publish operation by an administrator, as demonstrated by a malforgenix/cms
- CVE-2017-8763Cross-site scripting (XSS) vulnerability in modules/Base/Box/check_for_new_version.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows re
- CVE-2017-8765The function named ReadICONImage in coders\icon.c in ImageMagick 7.0.5-5 has a memory leak vulnerability which can cause memory exhaustion v
- CVE-2017-8773Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Out
- CVE-2017-8774Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Mem
- CVE-2017-8775Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 are vulnerable to Mem
- CVE-2017-8776Quick Heal Internet Security 10.1.0.316, Quick Heal Total Security 10.1.0.316, and Quick Heal AntiVirus Pro 10.1.0.316 have approximately 16