Browse CVEs

HIGH 7.5 CVE-2017-14028 A Resource Exhaustion issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NP… Nport 5110 Firmware after 3.7 Fix from $1,9502017-11-16 HIGH 7.5 CVE-2017-12318 A vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an unauthenticated, remote attacker to prevent an affected device … Rf Gateway 1 Firmware Mitigation only Fix from $1,9502017-11-16 HIGH 7.5 CVE-2016-8610EPSS 40% A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALE… OpenSSL after 1.0.2h Fix from $1,9502017-11-13 HIGH 7.8 CVE-2017-7132 An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "Quick Look" component. It allows remote … Mac Os X after 10.13.0 Fix from $1,9502017-11-13 HIGH 7.8 CVE-2017-13825 An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CoreText" component. It allows remote at… Mac Os X after 10.13.0 Fix from $1,9502017-11-13 HIGH 7.5 CVE-2017-14360 A potential security vulnerability has been identified in HPE Content Manager Workgroup Service v9.00. The vulnerability could be remotely exploited … Content Manager No fix yet Fix from $1,9502017-11-08 HIGH 7.5 CVE-2017-2884 An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1. A repeated set of specially … Circle With Disney Firmware No fix yet Fix from $1,9502017-11-07 HIGH 7.5 CVE-2017-2889 An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1. A large amount of simultaneous … Circle With Disney Firmware No fix yet Fix from $1,9502017-11-07 MEDIUM 5.3 CVE-2017-6161 In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1.2, 11.6.… Big Ip Local Traffic Manager after 11.5.4 Fix from $1,6002017-10-27 HIGH 7.5 CVE-2017-15882 The London Trust Media Private Internet Access (PIA) application before 1.3.3.1 for Android allows remote attackers to cause a denial of service (app… Private Internet Access 1.3.3.1+ Fix from $1,9502017-10-26 HIGH 7.5 CVE-2017-7086 An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS bef… Iphone Os after 10.12.6 Fix from $1,9502017-10-23 HIGH 8.6 CVE-2017-12293 A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vuln… Webex Meetings Server Mitigation only Fix from $1,9502017-10-19 MEDIUM 6.5 CVE-2014-7813 Red Hat CloudForms 3 Management Engine (CFME) allows remote authenticated users to cause a denial of service (resource consumption) via vectors invol… Cloudforms 3.0 Management Engine Mitigation only Fix from $1,6002017-10-18 HIGH 8.8 CVE-2017-15595 An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recursion, stack consumption, and… Xen after 4.9.0 Fix from $1,9502017-10-18 MEDIUM 6.0 CVE-2017-15596 An issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial of service (prevent physical CPU usage) because of l… Xen Patch available Fix from $1,6002017-10-18 HIGH 7.5 CVE-2014-9697 Huawei USG9560/9520/9580 before V300R001C01SPC300 allows remote attackers to cause a memory leak or denial of service (memory exhaustion, reboot and … Usg9560 Firmware Mitigation only Fix from $1,9502017-10-17 MEDIUM 6.5 CVE-2016-8734EPSS 6% Apache Subversion's mod_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-service attack… Subversion Mitigation only Fix from $1,6002017-10-16 MEDIUM 5.5 CVE-2017-15298 Git through 2.14.2 mishandles layers of tree objects, which allows remote attackers to cause a denial of service (memory consumption) via a crafted r… Git after 2.14.2 Fix from $1,6002017-10-14 HIGH 7.5 CVE-2017-10608 Any Juniper Networks SRX series device with one or more ALGs enabled may experience a flowd crash when traffic is processed by the Sun/MS-RPC ALGs. T… Junos Mitigation only Fix from $1,9502017-10-13 MEDIUM 5.5 CVE-2017-10613 A vulnerability in a specific loopback filter action command, processed in a specific logical order of operation, in a running configuration of Junip… Junos Mitigation only Fix from $1,6002017-10-13 HIGH 7.5 CVE-2017-10614 A vulnerability in telnetd service on Junos OS allows a remote attacker to cause a limited memory and/or CPU consumption denial of service attack. Th… Junos Mitigation only Fix from $1,9502017-10-13 MEDIUM 5.3 CVE-2017-10621 A denial of service vulnerability in telnetd service on Juniper Networks Junos OS allows remote unauthenticated attackers to cause a denial of servic… Junos Mitigation only Fix from $1,6002017-10-13 HIGH 7.5 CVE-2017-15193 In Wireshark 2.4.0 to 2.4.1 and 2.2.0 to 2.2.9, the MBIM dissector could crash or exhaust system memory. This was addressed in epan/dissectors/packet… Wireshark Patch available Fix from $1,9502017-10-10 HIGH 7.5 CVE-2017-5637EPSS 73% Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which lead… Zookeeper Mitigation only Fix from $1,9502017-10-10 HIGH 7.5 CVE-2017-14086EPSS 8% Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the Offic… Officescan Patch available Fix from $1,9502017-10-06 HIGH 7.5 CVE-2017-15010 A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js. An attacker that is able to make a… Tough Cookie after 2.3.2 Fix from $1,9502017-10-04 MEDIUM 5.5 CVE-2017-14988 Header::readfrom in IlmImf/ImfHeader.cpp in OpenEXR 2.2.0 allows remote attackers to cause a denial of service (excessive memory allocation) via a cr… Openexr Mitigation only Fix from $1,6002017-10-03 HIGH 7.8 CVE-2017-8247 In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open operation, the… Android after 8.0 Fix from $1,9502017-09-21 HIGH 7.5 CVE-2017-14616 An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If a login attempt is made in the XML-RPC interface with an XML message containi… Fireware after 11.12.4 Fix from $1,9502017-09-20 MEDIUM 6.5 CVE-2017-14341 ImageMagick 7.0.6-6 has a large loop vulnerability in ReadWPGImage in coders/wpg.c, causing CPU exhaustion via a crafted wpg image file. Ubuntu Linux Patch available Fix from $1,6002017-09-12