CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 29, 00:22 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2016-5979 | DM Distributed Marketing Ibm | 2.7 | May 15 | IBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to create an instance that gets created with security profile not valid for the templates,… |
| CVE-2017-8933 | LI Libmenu-cache Libmenu-cache Project | 3.3 | May 15 | Libmenu-cache 1.0.2 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (menu unavailability) |
| CVE-2017-4896 | AA Airwatch Agent Vmware | 3.8 | May 10 | Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application |
| CVE-2017-0895 | NS Nextcloud Server Nextcloud | 3.5 | May 8 | Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users |
| CVE-2017-0892 | NS Nextcloud Server Nextcloud | 3.5 | May 8 | Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to the users file |
| CVE-2017-7995 | SL Suse Linux Enterprise Point OF Sale Novell | 3.8 | May 3 | Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure |
| CVE-2017-8418 | RU Rubocop Rubocop Project | 3.3 | May 2 | RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users |
| CVE-2017-2137 | PP Prosafe Plus Configuration Utility Netgear | 3.7 | Apr 28 | ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests |
| CVE-2017-2109 | KU Kunai Cybozu | 2.5 | Apr 28 | Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application |
| CVE-2017-6052 | BL Blue Link Hyundai | 3.7 | Apr 26 | A Man-in-the-Middle issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4 |
| CVE-2017-3626 | GS Glassfish Server Oracle | 3.1 | Apr 24 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces) |
| CVE-2017-3603 | WS Webcenter Sites Oracle | 3.1 | Apr 24 | Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI) |
| CVE-2017-3598 | WS Webcenter Sites Oracle | 3.1 | Apr 24 | Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI) |
| CVE-2017-3590 | CO Connector/python Oracle | 3.3 | Apr 24 | Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python) |
| CVE-2017-3589 | CO Connector/j Oracle | 3.3 | Apr 24 | Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J) |
| CVE-2017-3544 | AN Android Google | 3.7 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) |
| CVE-2017-3539 | DL Debian Linux Debian | 3.1 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) |
| CVE-2017-3533 | DL Debian Linux Debian | 3.7 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) |
| CVE-2017-3513 | VV VM Virtualbox Oracle | 2.5 | Apr 24 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) |
| CVE-2017-3498 | SO Solaris Oracle | 3.3 | Apr 24 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel) |
| CVE-2017-3490 | FE Flexcube Enterprise Limits And Collateral Management Oracle | 3.1 | Apr 24 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and Collateral) |
| CVE-2017-3487 | FI Flexcube Investor Servicing Oracle | 3.1 | Apr 24 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust) |
| CVE-2017-3474 | SO Solaris Oracle | 3.3 | Apr 24 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zone) |
| CVE-2017-3469 | MW Mysql Workbench Oracle | 3.7 | Apr 24 | Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security : Encryption) |
| CVE-2017-3468 | MY MySQL Oracle | 3.1 | Apr 24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption) |
| CVE-2017-3467 | MY MySQL Oracle | 3.7 | Apr 24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API) |
| CVE-2017-3307 | ME Mysql Enterprise Monitor Oracle | 3.1 | Apr 24 | Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server) |
| CVE-2016-5551 | SC Solaris Cluster Oracle | 2.8 | Apr 24 | Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition) |
| CVE-2014-9680 | SU Sudo Sudo Project | 3.3 | Apr 24 | sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not… |
| CVE-2017-2806 | PD Perceptive Document Filters Lexmark | 3.3 | Apr 20 | An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality |
| CVE-2017-5190 | AM Access Manager Netiq | 3.1 | Apr 20 | NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a concurrency issue causing information… |
| CVE-2016-4874 | OF Office Cybozu | 3.5 | Apr 17 | Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack |
| CVE-2016-4455 | EL Enterprise Linux Desktop Redhat | 3.3 | Apr 14 | The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows… |
| CVE-2016-2567 | GN Galaxy Note 3 Firmware Samsung | 3.3 | Apr 13 | secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to bypass URL filtering… |
| CVE-2016-2565 | GS Galaxy S6 Firmware Samsung | 3.3 | Apr 13 | Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to read sent e-mail messages, aka SVE-2015-5081 |
| CVE-2016-10118 | FI Firejail Firejail Project | 3.3 | Apr 13 | Firejail allows local users to truncate /etc/resolv.conf via a chroot command to / |
| CVE-2017-3033 | AC Acrobat Adobe | 3.3 | Apr 12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling JPEG 2000 code-stream… |
| CVE-2017-3032 | AC Acrobat Adobe | 3.3 | Apr 12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 code-stream parser |
| CVE-2017-3031 | AC Acrobat Adobe | 3.3 | Apr 12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the XSLT engine |
| CVE-2017-3029 | AC Acrobat Adobe | 3.3 | Apr 12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling a JPEG 2000… |
| CVE-2017-3022 | AC Acrobat Adobe | 3.3 | Apr 12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when parsing the header of a JPEG… |
| CVE-2017-3021 | AC Acrobat Adobe | 3.3 | Apr 12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser engine |
| CVE-2017-3020 | AC Acrobat Adobe | 3.3 | Apr 12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the weblink module |
| CVE-2017-0188 | WI Windows Microsoft | 3.3 | Apr 12 | A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the… |
| CVE-2017-0159 | WI Windows Microsoft | 3.7 | Apr 12 | A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as… |
| CVE-2017-5607 | SP Splunk Splunk | 3.5 | Apr 10 | Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3 and Splunk… |
| CVE-2017-5686 | NB Nuc6i3syh Bios Intel | 3.9 | Apr 3 | The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version SY0059 may allow may allow an attacker with physical access to the system to gain access to… |
| CVE-2017-5685 | NB Nuc6i7kyk Bios Intel | 3.9 | Apr 3 | The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version KY0045 may allow may allow an attacker with physical access to the system to gain access to… |
| CVE-2017-5684 | SB Stk2mv64cc Bios Intel | 3.9 | Apr 3 | The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attacker with physical access to the system to gain access to… |
| CVE-2017-7407 | CU Curl Haxx | 2.4 | Apr 3 | The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic… |