CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 03:11 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2017-10254 | PE Peoplesoft Enterprise Staffing Front Office Oracle | 2.7 | Aug 8 | Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Office) |
| CVE-2017-10193 | DL Debian Linux Debian | 3.1 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) |
| CVE-2017-10122 | SO Solaris Oracle | 1.8 | Aug 8 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel) |
| CVE-2017-10120 | DS Database Server Oracle | 1.9 | Aug 8 | Vulnerability in the RDBMS Security component of Oracle Database Server |
| CVE-2017-10095 | SO Solaris Oracle | 3.3 | Aug 8 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel) |
| CVE-2017-10088 | AP Agile Product Lifecycle Management Oracle | 3.4 | Aug 8 | Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security) |
| CVE-2015-7561 | KU Kubernetes Kubernetes | 3.1 | Aug 7 | Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image |
| CVE-2017-9856 | SB Sunny Boy 1.5 Firmware Sma | 3.4 | Aug 5 | An issue was discovered in SMA Solar Technology products |
| CVE-2016-7812 | MU Mitsubishi Ufj Mufg | 3.1 | Aug 2 | The Bank of Tokyo-Mitsubishi UFJ, Ltd |
| CVE-2017-1381 | WA Websphere Application Server Ibm | 3.3 | Jul 21 | IBM WebSphere Application Server Proxy Server or On-demand-router (ODR) 7.0, 8.0, 8.5, 9.0 and could allow a local attacker to obtain sensitive information, caused by stale data… |
| CVE-2017-7058 | IO iOS Apple | 2.4 | Jul 20 | An issue was discovered in certain Apple products |
| CVE-2017-9843 | NA Netweaver Abap Sap | 2.7 | Jul 12 | SAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a denial of service (process crash) via vectors involving disp+work.exe, aka SAP… |
| CVE-2017-0709 | AN Android Google | 3.3 | Jul 6 | A information disclosure vulnerability in the HTC sensor hub driver |
| CVE-2017-1144 | IB Integration Bus Ibm | 2.5 | Jul 5 | IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starting |
| CVE-2017-1176 | MA Maximo Asset Management Ibm | 3.3 | Jul 5 | IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropriate data retention of attachments |
| CVE-2016-0238 | SG Security Guardium Ibm | 3.7 | Jul 5 | IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request |
| CVE-2017-5244 | ME Metasploit Rapid7 | 3.5 | Jun 15 | Routes used to stop running Metasploit tasks (either particular ones or all tasks) allowed GET requests |
| CVE-2015-9032 | AN Android Google | 3.3 | Jun 13 | In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications |
| CVE-2015-9031 | AN Android Google | 3.3 | Jun 13 | In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP |
| CVE-2017-1125 | CB Cognos Business Intelligence Server Ibm | 3.3 | Jun 7 | IBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm the existence of and expose postial contents of a file |
| CVE-2017-9441 | BC Bigtree Cms Bigtreecms | 2.7 | Jun 5 | Multiple cross-site scripting (XSS) vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to inject arbitrary web script or HTML by uploading a crafted… |
| CVE-2017-3741 | PM Power Management Lenovo | 3.3 | Jun 4 | In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's firmware and stop the trackpoint from functioning correctly |
| CVE-2015-3189 | CF Cf-release Cloudfoundry | 3.7 | May 25 | With Cloud Foundry Runtime cf-release versions v208 or earlier, UAA Standalone versions 2.2.5 or earlier and Pivotal Cloud Foundry Runtime 1.4.5 or earlier, old Password Reset… |
| CVE-2017-2161 | FL Flashair Toshiba | 3.5 | May 22 | FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 and earlier allows authenticated attackers… |
| CVE-2017-9139 | FF F1200 Firmware Tendacn | 3.5 | May 21 | There is a stack-based buffer overflow on some Tenda routers (FH1202/F1202/F1200: versions before 1.2.0.20) |
| CVE-2016-5979 | DM Distributed Marketing Ibm | 2.7 | May 15 | IBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to create an instance that gets created with security profile not valid for the templates,… |
| CVE-2017-8933 | LI Libmenu-cache Libmenu-cache Project | 3.3 | May 15 | Libmenu-cache 1.0.2 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (menu unavailability) |
| CVE-2017-4896 | AA Airwatch Agent Vmware | 3.8 | May 10 | Airwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the local data used by the application |
| CVE-2017-0895 | NS Nextcloud Server Nextcloud | 3.5 | May 8 | Nextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and addressbook names to other logged-in users |
| CVE-2017-0892 | NS Nextcloud Server Nextcloud | 3.5 | May 8 | Nextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an application specific password without permission to the files access to the users file |
| CVE-2017-7995 | SL Suse Linux Enterprise Point OF Sale Novell | 3.8 | May 3 | Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure |
| CVE-2017-8418 | RU Rubocop Rubocop Project | 3.3 | May 2 | RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users |
| CVE-2017-2137 | PP Prosafe Plus Configuration Utility Netgear | 3.7 | Apr 28 | ProSAFE Plus Configuration Utility prior to 2.3.29 allows remote attackers to bypass access restriction and change configurations of the switch via SOAP requests |
| CVE-2017-2109 | KU Kunai Cybozu | 2.5 | Apr 28 | Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application |
| CVE-2017-6052 | BL Blue Link Hyundai | 3.7 | Apr 26 | A Man-in-the-Middle issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4 |
| CVE-2017-3626 | GS Glassfish Server Oracle | 3.1 | Apr 24 | Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces) |
| CVE-2017-3603 | WS Webcenter Sites Oracle | 3.1 | Apr 24 | Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI) |
| CVE-2017-3598 | WS Webcenter Sites Oracle | 3.1 | Apr 24 | Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI) |
| CVE-2017-3590 | CO Connector/python Oracle | 3.3 | Apr 24 | Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python) |
| CVE-2017-3589 | CO Connector/j Oracle | 3.3 | Apr 24 | Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J) |
| CVE-2017-3544 | AN Android Google | 3.7 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) |
| CVE-2017-3539 | DL Debian Linux Debian | 3.1 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) |
| CVE-2017-3533 | DL Debian Linux Debian | 3.7 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) |
| CVE-2017-3513 | VV VM Virtualbox Oracle | 2.5 | Apr 24 | Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core) |
| CVE-2017-3498 | SO Solaris Oracle | 3.3 | Apr 24 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel) |
| CVE-2017-3490 | FE Flexcube Enterprise Limits And Collateral Management Oracle | 3.1 | Apr 24 | Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and Collateral) |
| CVE-2017-3487 | FI Flexcube Investor Servicing Oracle | 3.1 | Apr 24 | Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust) |
| CVE-2017-3474 | SO Solaris Oracle | 3.3 | Apr 24 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zone) |
| CVE-2017-3469 | MW Mysql Workbench Oracle | 3.7 | Apr 24 | Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security : Encryption) |
| CVE-2017-3468 | MY MySQL Oracle | 3.1 | Apr 24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption) |