CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 06:49 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2017-11874 | CH Chakracore Microsoft | 3.1 | Nov 15 | Microsoft Edge in Microsoft Windows 10 1703, 1709, Windows Server, version 1709, and ChakraCore allows an attacker to bypass Control Flow Guard (CFG) to run arbitrary code on a… |
| CVE-2017-11850 | WI Windows Microsoft | 2.5 | Nov 15 | Microsoft Graphics Component in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version… |
| CVE-2017-11833 | ED Edge Microsoft | 3.1 | Nov 15 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to determine the origin of all… |
| CVE-2017-11791 | CH Chakracore Microsoft | 3.1 | Nov 15 | ChakraCore and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and Microsoft Edge and… |
| CVE-2017-11768 | WM Windows Media Player Microsoft | 2.5 | Nov 15 | Windows Media Player in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and 1709, Windows… |
| CVE-2017-9371 | QS Qnx Software Development Platform Blackberry | 2.6 | Nov 14 | In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default configuration of the QNX SDP could allow an… |
| CVE-2017-9369 | QS Qnx Software Development Platform Blackberry | 3.8 | Nov 14 | In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulnerability in the default configuration of the QNX SDP could… |
| CVE-2017-3893 | QS Qnx Software Development Platform Blackberry | 1.9 | Nov 14 | In BlackBerry QNX Software Development Platform (SDP) 6.6.0, the default configuration of the QNX SDP system did not in all circumstances prevent attackers from modifying the GOT… |
| CVE-2017-3892 | QS Qnx Software Development Platform Blackberry | 3.8 | Nov 14 | In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure vulnerability in the default configuration of the QNX SDP could allow an attacker to gain… |
| CVE-2017-13852 | IO iOS Apple | 3.3 | Nov 13 | An issue was discovered in certain Apple products |
| CVE-2017-13844 | IO iOS Apple | 2.4 | Nov 13 | An issue was discovered in certain Apple products |
| CVE-2017-13805 | IO iOS Apple | 2.4 | Nov 13 | An issue was discovered in certain Apple products |
| CVE-2017-13801 | MO Mac OS X Apple | 3.3 | Nov 13 | An issue was discovered in certain Apple products |
| CVE-2017-1000242 | GC Git Client Jenkins | 3.3 | Nov 1 | Jenkins Git Client Plugin 2.4.2 and earlier creates temporary file with insecure permissions resulting in information disclosure |
| CVE-2017-5084 | CO Chrome OS Google | 3.3 | Oct 27 | Inappropriate implementation in image-burner in Google Chrome OS prior to 59.0.3071.92 allowed a local attacker to read local files via dbus-send commands to a BurnImage D-Bus… |
| CVE-2017-5081 | CH Chrome Google | 3.3 | Oct 27 | Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed an attacker with… |
| CVE-2017-1228 | BP Bigfix Platform Ibm | 3.7 | Oct 26 | IBM Tivoli Endpoint Manager (IBM BigFix Platform 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable the secure… |
| CVE-2017-15096 | GL Glusterfs Gluster | 3.3 | Oct 26 | A flaw was found in GlusterFS in versions prior to 3.10 |
| CVE-2017-1211 | DV Daeja Viewone Ibm | 2.5 | Oct 24 | IBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0.2 could disclose sensitive information to a local user when logging is enabled |
| CVE-2017-7148 | IO iOS Apple | 3.3 | Oct 23 | An issue was discovered in certain Apple products |
| CVE-2017-7139 | IO iOS Apple | 2.4 | Oct 23 | An issue was discovered in certain Apple products |
| CVE-2017-7138 | MO Mac OS X Apple | 3.3 | Oct 23 | An issue was discovered in certain Apple products |
| CVE-2017-7084 | MO Mac OS X Apple | 3.7 | Oct 23 | An issue was discovered in certain Apple products |
| CVE-2017-7082 | MO Mac OS X Apple | 2.4 | Oct 23 | An issue was discovered in certain Apple products |
| CVE-2017-10426 | PE Peoplesoft Enterprise Staffing Front Office Oracle | 2.7 | Oct 19 | Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Office) |
| CVE-2017-10399 | HC Hospitality Cruise Fleet Management Oracle | 3.1 | Oct 19 | Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: GangwayActivityWebApp) |
| CVE-2017-10365 | MY MySQL Oracle | 3.8 | Oct 19 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB) |
| CVE-2017-10345 | DL Debian Linux Debian | 3.1 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) |
| CVE-2017-10341 | JA Java Advanced Management Console Oracle | 3.7 | Oct 19 | Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server) |
| CVE-2017-10308 | AP Agile Product Lifecycle Management Oracle | 3.5 | Oct 19 | Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Performance) |
| CVE-2017-10292 | DA Database Oracle | 2.3 | Oct 19 | Vulnerability in the RDBMS Security component of Oracle Database Server |
| CVE-2017-10194 | IL Integrated Lights Out Manager Firmware Oracle | 2.7 | Oct 19 | Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management) |
| CVE-2017-10166 | SS Security Service Oracle | 3.7 | Oct 19 | Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: C Oracle SSL API) |
| CVE-2017-10014 | HH Hospitality Hotel Mobile Oracle | 3.5 | Oct 19 | Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RESTAPI) |
| CVE-2017-1000114 | DA Datadog Jenkins | 3.1 | Oct 5 | The Datadog Plugin stores an API key to access the Datadog service in the global Jenkins configuration |
| CVE-2017-14772 | SM Skybox Manager Client Application Skyboxsecurity | 3.3 | Oct 3 | Skybox Manager Client Application is prone to information disclosure via a username enumeration attack |
| CVE-2015-5070 | FE Fedora Fedoraproject | 3.1 | Sep 26 | The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.4 and 1.13.x before… |
| CVE-2015-0238 | OP Openshift Redhat | 3.3 | Sep 26 | selinux-policy as packaged in Red Hat OpenShift 2 allows attackers to obtain process listing information via a privilege escalation attack |
| CVE-2017-1346 | BP Business Process Manager Ibm | 2.5 | Sep 25 | IBM Business Process Manager 7.5, 8.0, and 8.5 temporarily stores files in a temporary folder during offline installs which could be read by a local user within a short timespan |
| CVE-2017-14595 | JO Joomla Joomla | 3.7 | Sep 20 | In Joomla! before 3.8.0, a logic bug in a SQL query could lead to the disclosure of article intro texts when these articles are in the archived state |
| CVE-2015-8224 | PF P8 Firmware Huawei | 3.7 | Sep 20 | Huawei P8 before GRA-CL00C92B210, before GRA-L09C432B200, before GRA-TL00C01B210, and before GRA-UL00C00B210 allows remote attackers to obtain user equipment (aka UE) measurements… |
| CVE-2017-10856 | BF B1 Firmware Seil | 3.7 | Sep 15 | SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attackers to cause a temporary failure of the device's encrypted… |
| CVE-2017-8676 | OF Office Microsoft | 3.3 | Sep 13 | The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows… |
| CVE-2017-1520 | DB Db2 Ibm | 3.7 | Sep 12 | IBM DB2 9.7, 10,1, 10.5, and 11.1 is vulnerable to an unauthorized command that allows the database to be activated when authentication type is CLIENT |
| CVE-2016-2978 | SA Sametime Ibm | 3.3 | Aug 29 | IBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache locally that could be available to a local user |
| CVE-2016-2974 | SA Sametime Ibm | 3.3 | Aug 29 | IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as… |
| CVE-2017-1422 | MD Maas360 Dtm Ibm | 3.3 | Aug 22 | IBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of certain applications which could disclose sensitive information |
| CVE-2017-12973 | NJ Nimbus Jose+jwt Connect2id | 3.1 | Aug 20 | Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack |
| CVE-2017-3653 | MY MySQL Oracle | 3.1 | Aug 8 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL) |
| CVE-2017-3650 | MY MySQL Oracle | 3.7 | Aug 8 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: C API) |