CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 07:38 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2017-15353 | DF Dp300 Firmware Huawei | 3.7 | Feb 15 | Huawei DP300, V500R002C00, RP200, V500R002C00, V600R006C00, RSE6500, V500R002C00, TE30, V100R001C02, V100R001C10, V500R002C00, V600R006C00, TE40, V500R002C00, V600R006C00, TE50,… |
| CVE-2017-15352 | O2 Oceanstor 2800 Firmware Huawei | 3.1 | Feb 15 | Huawei OceanStor 2800 V3, V300R003C00, V300R003C20, OceanStor 5300 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor 5500 V3, V300R003C00, V300R003C10, V300R003C20, OceanStor… |
| CVE-2017-15339 | DF Dp300 Firmware Huawei | 3.7 | Feb 15 | The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10,… |
| CVE-2017-15338 | DF Dp300 Firmware Huawei | 3.7 | Feb 15 | The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10,… |
| CVE-2017-15337 | DF Dp300 Firmware Huawei | 3.7 | Feb 15 | The SIP module in Huawei DP300 V500R002C00, IPS Module V100R001C10, V100R001C20, V100R001C30, V500R001C00, V500R001C20, V500R001C30, V500R001C50, NGFW Module V100R001C10,… |
| CVE-2017-12723 | M4 Medfusion 4000 Wireless Syringe Infusion Pump Smiths-medical | 3.7 | Feb 15 | A Password in Configuration File issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6 |
| CVE-2018-0853 | OF Office Microsoft | 3.3 | Feb 15 | Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow an information disclosure vulnerability,… |
| CVE-2018-0763 | ED Edge Microsoft | 3.1 | Feb 15 | Microsoft Edge in Microsoft Windows 10 1703 and 1709 allows information disclosure, due to how Edge handles objects in memory, aka "Microsoft Edge Information Disclosure… |
| CVE-2017-15709 | AC ActiveMQ Apache | 3.7 | Feb 13 | When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text |
| CVE-2018-1000030 | UL Ubuntu Linux Canonical | 3.6 | Feb 8 | Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free |
| CVE-2018-6382 | MA Mantisbt Mantisbt | 3.3 | Jan 30 | MantisBT 2.10.0 allows local users to conduct SQL Injection attacks via the vendor/adodb/adodb-php/server.php sql parameter in a request to the 127.0.0.1 IP address |
| CVE-2017-1000401 | JE Jenkins Jenkins | 2.2 | Jan 26 | The Jenkins 2.73.1 and earlier, 2.83 and earlier default form control for passwords and other secrets, <f:password/>, supports form validation (e.g |
| CVE-2018-1000003 | RE Recursor Powerdns | 3.7 | Jan 22 | Improper input validation bugs in DNSSEC validators components in PowerDNS version 4.1.0 allow attacker in man-in-the-middle position to deny existence of some data in DNS via… |
| CVE-2018-1000002 | KR Knot Resolver Nic | 3.7 | Jan 22 | Improper input validation bugs in DNSSEC validators components in Knot Resolver (prior version 1.5.2) allow attacker in man-in-the-middle position to deny existence of some data… |
| CVE-2018-0109 | WM Webex Meetings Server Cisco | 2.7 | Jan 18 | A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to access sensitive data about the application |
| CVE-2018-0106 | ES Elastic Services Controller Cisco | 3.3 | Jan 18 | A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an unauthenticated, local attacker to access sensitive information on a targeted… |
| CVE-2018-2675 | JA Java Advanced Management Console Oracle | 3.7 | Jan 18 | Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server) |
| CVE-2018-2579 | UL Ubuntu Linux Canonical | 3.7 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries) |
| CVE-2018-2575 | DS Database Server Oracle | 2.0 | Jan 18 | Vulnerability in the Core RDBMS component of Oracle Database Server |
| CVE-2018-5693 | MA Magicspam Linuxmagic | 3.3 | Jan 14 | The LinuxMagic MagicSpam extension before 2.0.14-1 for Plesk allows local users to discover mailbox names by reading /var/log/magicspam/mslog |
| CVE-2017-2158 | LH Lhaplus Lhaplus Project | 3.3 | Jan 12 | Improper verification when expanding ZIP64 archives in Lhaplus versions 1.73 and earlier may lead to unintended contents to be extracted from a specially crafted ZIP64 archive |
| CVE-2017-1681 | LI Liberty Ibm | 3.3 | Jan 11 | IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.15) could allow a local attacker to obtain sensitive information, caused by improper handling of application… |
| CVE-2017-1478 | SA Security Access Manager 9.0 Firmware Ibm | 3.3 | Jan 11 | IBM Security Access Manager Appliance 9.0.0 allows web pages to be stored locally which can be read by another user on the system |
| CVE-2018-5278 | MA Malwarebytes Malwarebytes | 3.3 | Jan 8 | In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not… |
| CVE-2017-1699 | WM Websphere MQ Ibm | 3.3 | Jan 4 | IBM MQ Managed File Transfer Agent 8.0 and 9.0 sets insecure permissions on certain files it creates |
| CVE-2017-1669 | SK Security Key Lifecycle Manager Ibm | 3.7 | Jan 4 | IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 stores sensitive information in URL parameters |
| CVE-2017-17864 | KE Kernel Linux | 3.3 | Dec 27 | kernel/bpf/verifier.c in the Linux kernel through 4.14.8 mishandles states_equal comparisons between the pointer data type and the UNKNOWN_VALUE data type, which allows local… |
| CVE-2017-15321 | FO Fusionsphere Openstack Huawei | 3.7 | Dec 22 | Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission protocol by default |
| CVE-2017-15307 | H8 Honor 8 Firmware Huawei | 2.3 | Dec 22 | Huawei Honor 8 smartphone with software versions earlier than FRD-L04C567B389 and earlier than FRD-L14C567B389 have a permission control vulnerability due to improper… |
| CVE-2017-17807 | KE Kernel Linux | 3.3 | Dec 20 | The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current task's "default request-key keyring" via the request_key()… |
| CVE-2017-1270 | SG Security Guardium Ibm | 3.3 | Dec 20 | IBM Security Guardium 10.0 does not renew a session variable after a successful authentication which could lead to session fixation/hijacking vulnerability |
| CVE-2017-1261 | SG Security Guardium Ibm | 3.3 | Dec 20 | IBM Security Guardium 10.0 stores potentially sensitive information in log files that could be read by a local user |
| CVE-2017-15530 | NF Norton Family Symantec | 3.3 | Dec 13 | Prior to 4.4.1.10, the Norton Family Android App can be susceptible to an Information Disclosure issue |
| CVE-2017-1716 | TW Tivoli Workload Scheduler Ibm | 3.3 | Dec 13 | IBM Tivoli Workload Scheduler 8.6.0, 9.1.0, and 9.2.0 could disclose sensitive information to a local attacker due to improper permission settings |
| CVE-2017-15897 | NO Node.js Nodejs | 3.1 | Dec 11 | Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill value did not match the encoding specified |
| CVE-2017-1497 | SF Sterling File Gateway Ibm | 3.7 | Dec 7 | IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the file |
| CVE-2017-1355 | AE Atlas Ediscovery Process Management Ibm | 3.7 | Dec 7 | IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters |
| CVE-2017-1353 | AE Atlas Ediscovery Process Management Ibm | 3.5 | Dec 7 | IBM Atlas eDiscovery Process Management 6.0.3 could allow an authenticated attacker to obtain sensitive information when an unsuspecting user clicks on unsafe third-party links |
| CVE-2017-1341 | WM Websphere MQ Ibm | 3.7 | Dec 7 | IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which they should have been denied access |
| CVE-2017-17433 | DL Debian Linux Debian | 3.7 | Dec 6 | The recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds with certain file metadata updates before checking for a… |
| CVE-2017-8822 | DL Debian Linux Debian | 3.7 | Dec 3 | In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, relays (that have incompletely downloaded… |
| CVE-2017-8118 | UM Uma Huawei | 2.3 | Nov 22 | The UMA product with software V200R001 and V300R001 has an information leak vulnerability |
| CVE-2017-2739 | VM Vmall Huawei | 3.1 | Nov 22 | The upgrade package of Huawei Vmall APP Earlier than HwVmall 1.5.3.0 versions is transferred through HTTP |
| CVE-2017-2730 | HI Hilink Huawei | 3.5 | Nov 22 | HUAWEI HiLink APP (for IOS) versions earlier before 5.0.25.306 and HUAWEI Tech Support APP (for IOS) versions earlier before 5.0.0 have an information leak vulnerability |
| CVE-2017-2705 | PF P9 Firmware Huawei | 2.4 | Nov 22 | Huawei P9 smartphones with software versions earlier before EVA-AL10C00B365, versions earlier before EVA-AL00C00B365, versions earlier before EVA-CL00C92B365, versions earlier… |
| CVE-2017-2701 | M9 Mate 9 Firmware Huawei | 3.3 | Nov 22 | Mate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability |
| CVE-2017-2694 | VM Vmall Huawei | 3.3 | Nov 22 | The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call |
| CVE-2017-15528 | IN Install Norton Security Norton | 3.7 | Nov 22 | Prior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate spoofing vulnerability, which is a type of attack whereby a maliciously procured… |
| CVE-2017-1086 | FR FreeBSD FreeBSD | 3.3 | Nov 16 | In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, not all information in the struct ptrace_lwpinfo is relevant… |
| CVE-2017-1088 | FR FreeBSD FreeBSD | 3.3 | Nov 16 | In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, the kernel does not properly clear the memory of the… |