CVEs published May 8, 2017
26 CVEs were published on May 8, 2017: 0 critical, 0 high.
- Published
- 26
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Nextcloud Server
- 6
- BLF-Tech LLC VisualView HMI
- 1
- Brocade Communications Systems Fibre Channel SAN products r…
- 1
- Brocade Communications Systems NetIron XMR/MLX and Brocade…
- 1
- EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0…
- 1
- genix/cms
- 1
Medium, low and unrated 26
- CVE-2017-4982EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0.0, and 8.1.0 contains a fix for a privilege management vulnerability that could EMC Mainframe Enablers ResourcePak Base versions 7.6.0, 8.0…
- CVE-2017-0890Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module.Nextcloud Server
- CVE-2017-0891Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of error messages leading to XSS vulnerabilitiNextcloud Server
- CVE-2017-0892Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to Nextcloud Server
- CVE-2017-0893Nextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are shipping a vulnerable JavaScript library for sanitizing untrusted user-input which Nextcloud Server
- CVE-2017-0894Nextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public calendars due to a logical error.Nextcloud Server
- CVE-2017-0895Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users.Nextcloud Server
- CVE-2016-10369unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (prevent
- CVE-2016-8202A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d andBrocade Communications Systems Fibre Channel SAN products r…
- CVE-2016-8209Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the MaBrocade Communications Systems NetIron XMR/MLX and Brocade…
- CVE-2017-6051An Uncontrolled Search Path Element issue was discovered in BLF-Tech LLC VisualView HMI Version 9.9.14.0 and prior.BLF-Tech LLC VisualView HMI
- CVE-2017-6953Gemalto SmartDiag Diagnosis Tool v2.5 has a stack-based Buffer Overflow with SEH Overwrite via long "Register a new card" input fields.
- CVE-2017-8848Allen Disk 1.6 has CSRF in setpass.php with an impact of changing a password.
- CVE-2017-8825A null dereference vulnerability has been found in the MIME handling component of LibEtPan before 1.8, as used in MailCore and MailCore 2.
- CVE-2017-8842The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (divide-
- CVE-2017-8843The join_pthread function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (NULL pointer deref
- CVE-2017-8844The read_1g function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (heap-based buffer overf
- CVE-2017-8845The lzo1x_decompress function in lzo1x_d.ch in LZO 2.08, as used in lrzip 0.631, allows remote attackers to cause a denial of service (inval
- CVE-2017-8846The read_stream function in stream.c in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (use-after-free and
- CVE-2017-8847The bufRead::get() function in libzpaq/libzpaq.h in liblrzip.so in lrzip 0.631 allows remote attackers to cause a denial of service (NULL po
- CVE-2017-8827forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service (login inability) ogenix/cms
- CVE-2017-8829Deserialization vulnerability in lintian through 2.5.50.3 allows attackers to trigger code execution by requesting a review of a source pack
- CVE-2017-8830In ImageMagick 7.0.5-6, the ReadBMPImage function in bmp.c:1379 allows attackers to cause a denial of service (memory leak) via a crafted fi
- CVE-2017-8831The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.11.5 allows local users to cause a den
- CVE-2017-8832Allen Disk 1.6 has XSS in the id parameter to downfile.php.
- CVE-2017-8833Zen Cart 1.6.0 has XSS in the main_page parameter to index.php.