Browse CVEs

MEDIUM 5.6 CVE-2017-5754EPSS 84% Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an at… Atom C Patch available Fix from $1,6002018-01-04 HIGH 7.5 CVE-2017-1000412 Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable to the bellcore attack in the LibTomCrypt code resulting in … Op Tee after 2.4.0 Fix from $1,9502018-01-02 MEDIUM 5.9 CVE-2017-1000413 Linaro's open source TEE solution called OP-TEE, version 2.4.0 (and older) is vulnerable a timing attack in the Montgomery parts of libMPA in OP-TEE … Op Tee after 2.4.0 Fix from $1,6002018-01-02 CRITICAL 9.8 CVE-2018-3813 getConfigExportFile.cgi on FLIR Brickstream 2300 devices 2.0 4.1.53.166 has Incorrect Access Control, as demonstrated by reading the AVI_USER_ID and … Brickstream 2300 2d Firmware No fix yet Fix from $2,3002018-01-01 HIGH 7.5 CVE-2013-7400 The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging improper checkin… Direct Mail 3.1.2+ Fix from $1,9502017-12-29 MEDIUM 5.3 CVE-2017-17926 PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attackers to register with an invali… Professional Service Script No fix yet Fix from $1,6002017-12-27 HIGH 7.5 CVE-2017-17898 Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information. Dolibarr Erp\/crm Patch available Fix from $1,9502017-12-27 MEDIUM 5.3 CVE-2017-1698 IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error message that could lead to further attacks against the s… Websphere Portal Mitigation only Fix from $1,6002017-12-27 MEDIUM 5.9 CVE-2017-13864 An issue was discovered in certain Apple products. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. The issue i… Icloud 7.2 / 12.7.2+ Fix from $1,6002017-12-25 MEDIUM 5.5 CVE-2017-13865 An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watch… Iphone Os 4.2 / 10.13.2+ Fix from $1,6002017-12-25 MEDIUM 5.5 CVE-2017-13868 An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watch… Iphone Os 4.2 / 10.13.2+ Fix from $1,6002017-12-25 MEDIUM 5.5 CVE-2017-13869 An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watch… Iphone Os 4.2 / 10.13.2+ Fix from $1,6002017-12-25 HIGH 7.5 CVE-2017-15328 Huawei HG8245H version earlier than V300R018C00SPC110 has an authentication bypass vulnerability. An attacker can access a specific URL of the affect… Hg8245h Firmware Mitigation only Fix from $1,9502017-12-22 HIGH 7.5 CVE-2017-17692EPSS 79% Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript co… Internet Browser No fix yet Fix from $1,9502017-12-21 HIGH 8.0 CVE-2017-5262 In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive information by … Cnpilot R190v Firmware after 4.3.2-r4 Fix from $1,9502017-12-20 CRITICAL 9.8 CVE-2017-6094 CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS instance. A CPE identifies itself … Gaps 7.2+ Fix from $2,3002017-12-20 MEDIUM 5.5 CVE-2017-1596 IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM… Security Guardium Mitigation only Fix from $1,6002017-12-20 MEDIUM 5.3 CVE-2017-1423 IBM WebSphere Portal 8.5 and 9.0 exposes backend server URLs that are configured for usage by the Web Application Bridge component. IBM X-Force ID: 1… Websphere Portal Mitigation only Fix from $1,6002017-12-20 MEDIUM 5.5 CVE-2017-1595 IBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain highly sensitive information via unspecified vectors. IBM… Security Guardium Mitigation only Fix from $1,6002017-12-20 HIGH 8.8 CVE-2017-17476 Open Ticket Request System (OTRS) 4.0.x before 4.0.28, 5.0.x before 5.0.26, and 6.0.x before 6.0.3, when cookie support is disabled, might allow remo… Debian Linux 4.0.28 / 5.0.26+ Fix from $1,9502017-12-20 MEDIUM 6.5 CVE-2017-16584 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.2.25013. User interactio… Foxit Reader Patch available Fix from $1,6002017-12-20 MEDIUM 6.5 CVE-2017-16588 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interactio… Foxit Reader Patch available Fix from $1,6002017-12-20 MEDIUM 6.5 CVE-2017-16589 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interactio… Foxit Reader Patch available Fix from $1,6002017-12-20 MEDIUM 6.5 CVE-2017-16573 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interactio… Foxit Reader Patch available Fix from $1,6002017-12-20 MEDIUM 6.5 CVE-2017-16574 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interactio… Foxit Reader Patch available Fix from $1,6002017-12-20 MEDIUM 6.5 CVE-2017-16579 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.2.25013. User interactio… Foxit Reader Patch available Fix from $1,6002017-12-20 MEDIUM 6.5 CVE-2017-16580 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.2.25013. User interactio… Foxit Reader Patch available Fix from $1,6002017-12-20 MEDIUM 6.5 CVE-2017-10956 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interactio… Foxit Reader Patch available Fix from $1,6002017-12-20 MEDIUM 6.5 CVE-2017-14818 This vulnerability allows remote attackers to disclose sensitive on vulnerable installations of Foxit Reader 8.3.1.21155. User interaction is require… Foxit Reader Patch available Fix from $1,6002017-12-20 MEDIUM 6.5 CVE-2017-14819 This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Foxit Reader 8.3.1.21155. User interactio… Foxit Reader Patch available Fix from $1,6002017-12-20