Browse CVEs

MEDIUM 5.5 CVE-2017-1000201 The tcmu-runner daemon in tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a local denial of service attack Tcmu Runner Patch available Fix from $1,6002017-11-17 HIGH 7.5 CVE-2017-0858 Another vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-64836894. Android Patch available Fix from $1,9502017-11-16 HIGH 7.8 CVE-2017-11027 In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing UBI image, size is not… Android Patch available Fix from $1,9502017-11-16 HIGH 7.8 CVE-2017-4931 VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add malicious data to an enrolled d… Airwatch 9.2.0+ Fix from $1,9502017-11-16 MEDIUM 5.3 CVE-2017-12299 A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Services that… Firepower Extensible Operating System Mitigation only Fix from $1,6002017-11-16 MEDIUM 5.8 CVE-2017-12300 A vulnerability in the SNORT detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a file pol… Secure Firewall Management Center Mitigation only Fix from $1,6002017-11-16 MEDIUM 5.8 CVE-2017-12311 A vulnerability in the H.264 decoder function of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a Cisco Meeting Server… Meeting Server Mitigation only Fix from $1,6002017-11-16 MEDIUM 6.7 CVE-2017-12312 An untrusted search path (aka DLL Preloading) vulnerability in the Cisco Immunet antimalware installer could allow an authenticated, local attacker t… Advanced Malware Protection For Endpoints Mitigation only Fix from $1,6002017-11-16 MEDIUM 6.7 CVE-2017-12313 An untrusted search path (aka DLL Preload) vulnerability in the Cisco Network Academy Packet Tracer software could allow an authenticated, local atta… Packet Tracer Mitigation only Fix from $1,6002017-11-16 HIGH 7.8 CVE-2017-16837 Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local users to… Trusted Boot Patch available Fix from $1,9502017-11-16 MEDIUM 5.5 CVE-2014-0219 Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sen… Karaf 4.0.10+ Fix from $1,6002017-11-15 HIGH 7.8 CVE-2017-14961 In IKARUS anti.virus 2.16.7, the ntguard.sys driver contains an Arbitrary Write vulnerability because of not validating input values from IOCtl 0x830… Anti.virus No fix yet Fix from $1,9502017-11-15 MEDIUM 5.3 CVE-2017-15270EPSS 7% The PSFTPd 10.0.4 Build 729 server does not properly escape data before writing it into a Comma Separated Values (CSV) file. This can be used by atta… Psftpd No fix yet Fix from $1,6002017-11-15 MEDIUM 6.1 CVE-2017-8811 The implementation of raw message parameter expansion in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows HTML mangling… Debian Linux after 1.27.3 Fix from $1,6002017-11-15 HIGH 7.5 CVE-2017-8814 The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attackers to replace text inside tags via a … Debian Linux after 1.27.3 Fix from $1,9502017-11-15 HIGH 7.5 CVE-2017-8815 The language converter in MediaWiki before 1.27.4, 1.28.x before 1.28.3, and 1.29.x before 1.29.2 allows attribute injection attacks via glossary rul… Debian Linux after 1.27.3 Fix from $1,9502017-11-15 MEDIUM 6.1 CVE-2017-11863 Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to trick… Edge Patch available Fix from $1,6002017-11-15 HIGH 7.8 CVE-2017-14388 Cloud Foundry Foundation GrootFS release 0.3.x versions prior to 0.30.0 do not validate DiffIDs, allowing specially crafted images to poison the groo… Grootfs Mitigation only Fix from $1,9502017-11-13 MEDIUM 5.5 CVE-2017-13849EPSS 6% An issue was discovered in certain Apple products. iOS before 11.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The iss… Iphone Os 4.1 / 11.1+ Fix from $1,6002017-11-13 MEDIUM 5.5 CVE-2017-13804 An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watch… Iphone Os 4.1 / 10.13.1+ Fix from $1,6002017-11-13 HIGH 7.8 CVE-2017-13807 An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Audio" component. It allows remote attac… Mac Os X after 10.13.0 Fix from $1,9502017-11-13 HIGH 7.8 CVE-2017-13809 An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "AppleScript" component. It allows remote… Mac Os X after 10.13.0 Fix from $1,9502017-11-13 MEDIUM 6.5 CVE-2017-13789 An issue was discovered in certain Apple products. Safari before 11.0.1 is affected. The issue involves the "Safari" component. It allows remote atta… Safari after 11.0 Fix from $1,6002017-11-13 MEDIUM 6.5 CVE-2017-13790 An issue was discovered in certain Apple products. Safari before 11.0.1 is affected. The issue involves the "Safari" component. It allows remote atta… Safari after 11.0 Fix from $1,6002017-11-13 MEDIUM 6.5 CVE-2017-12782 The ReadData function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a crafte… Libebml2 after 2012-08-26 Fix from $1,6002017-11-10 MEDIUM 6.5 CVE-2017-12783 The ReadDataFloat function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a c… Libebml2 after 2012-08-26 Fix from $1,6002017-11-10 MEDIUM 6.5 CVE-2017-12801 The UpdateDataSize function in ebmlmaster.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via a … Libebml2 after 2012-08-26 Fix from $1,6002017-11-10 MEDIUM 6.5 CVE-2017-12802 The EBML_IntegerValue function in ebmlnumber.c in libebml2 through 2012-08-26 allows remote attackers to cause a denial of service (assert fault) via… Libebml2 after 2012-08-26 Fix from $1,6002017-11-10 MEDIUM 5.5 CVE-2017-14025 An Improper Input Validation issue was discovered in ABB FOX515T release 1.0. An improper input validation vulnerability has been identified, allowin… Fox515t Firmware Mitigation only Fix from $1,6002017-11-06 HIGH 7.5 CVE-2017-11177 TRITON AP-EMAIL 8.2 before 8.2 IB does not properly restrict file access in an unspecified directory. Triton Ap Email No fix yet Fix from $1,9502017-11-06