CVEs published May 15, 2017
29 CVEs were published on May 15, 2017: 0 critical, 0 high.
- Published
- 29
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 29
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- Moodle 2.x and 3.x · moodle/moodle
- 3
- LibRaw-demosaic-pack-GPL2
- 2
- Microsoft Chakra Core · Microsoft.ChakraCore
- 2
- OpenVPN Technologies openvpn
- 2
- Apache Software Foundation Apache Ambari
- 1
- Apache Software Foundation Apache Qpid Broker-J · org.apach…
- 1
- IBM Distributed Marketing
- 1
- IBM QRadar SIEM
- 1
- IBM Rational Collaborative Lifecycle Management
- 1
- Linux kernel before
- 1
Medium, low and unrated 29
- CVE-2016-5979IBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to create an instance that gets created with securiIBM Distributed Marketing
- CVE-2016-9735IBM Jazz Foundation could allow an authenticated user to obtain sensitive information from stack traces.IBM Rational Collaborative Lifecycle Management
- CVE-2016-9750IBM QRadar 7.2 and 7.3 stores user credentials in plain in clear text which can be read by an authenticated user.IBM QRadar SIEM
- CVE-2017-6889An integer overflow error within the "foveon_load_camf()" function (dcraw_foveon.c) in LibRaw-demosaic-pack-GPL2 before 0.18.2 can be exploiLibRaw-demosaic-pack-GPL2
- CVE-2017-6890A boundary error within the "foveon_load_camf()" function (dcraw_foveon.c) when initializing a huffman table in LibRaw-demosaic-pack-GPL2 beLibRaw-demosaic-pack-GPL2
- CVE-2017-7478OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet.OpenVPN Technologies openvpn
- CVE-2017-7479OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into DeniaOpenVPN Technologies openvpn
- CVE-2017-7495fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs-flushing-before-commit list, whichLinux kernel before
- CVE-2017-8926Buffer overflow in Halliburton LogView Pro 10.0.1 allows attackers to cause a denial of service or possibly have unspecified other impact vi
- CVE-2017-8927Buffer overflow in Larson VizEx Reader 9.7.5 allows attackers to cause a denial of service or possibly have unspecified other impact via a c
- CVE-2017-8935The Quest Information Systems Indiana Voters app 1.1.24 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the
- CVE-2017-8936The MoboTap Dolphin Web Browser - Fast Private Internet Search app 9.23.0 through 9.23.2 for iOS does not verify X.509 certificates from SSL
- CVE-2017-8937The Life Before Us Yo app 2.5.8 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spo
- CVE-2017-8938The Radio Javan app 9.3.4 through 9.6.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attacker
- CVE-2017-8939The Warner Bros.
- CVE-2017-8940The Zipongo - Healthy Recipes and Grocery Deals app before 6.3 for iOS does not verify X.509 certificates from SSL servers, which allows man
- CVE-2017-8941The Interval International app 3.3 through 3.5.1 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle
- CVE-2017-8942The YottaMark ShopWell - Healthy Diet & Grocery Food Scanner app 5.3.7 through 5.4.2 for iOS does not verify X.509 certificates from SSL ser
- CVE-2017-8943The PUMA PUMATRAC app 3.0.2 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof s
- CVE-2017-0223A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory.Microsoft Chakra Core · Microsoft.ChakraCore
- CVE-2017-0252A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory.Microsoft Chakra Core · Microsoft.ChakraCore
- CVE-2016-8741The Apache Qpid Broker for Java can be configured to use different so called AuthenticationProviders to handle user authentication.Apache Software Foundation Apache Qpid Broker-J · org.apach…
- CVE-2017-5655In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host.Apache Software Foundation Apache Ambari
- CVE-2017-7489In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link.Moodle 2.x and 3.x · moodle/moodle
- CVE-2017-7490In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.Moodle 2.x and 3.x · moodle/moodle
- CVE-2017-7491In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the course overview bloMoodle 2.x and 3.x · moodle/moodle
- CVE-2017-8933Libmenu-cache 1.0.2 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (menu unavailability).
- CVE-2017-8934PCManFM 1.2.5 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (application unavailability).
- CVE-2017-7213Zoho ManageEngine Desktop Central before build 100082 allows remote attackers to obtain control over all connected active desktops via unspe