CVE Feed
Latest CVEs
Every CVE as it lands, mapped to the product it affects. Filter by time, severity and exploitation.
Updated Oct 30, 01:49 UTC
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2017-3467 | MY MySQL Oracle | 3.7 | Apr 24 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API) |
| CVE-2017-3307 | ME Mysql Enterprise Monitor Oracle | 3.1 | Apr 24 | Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server) |
| CVE-2016-5551 | SC Solaris Cluster Oracle | 2.8 | Apr 24 | Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition) |
| CVE-2014-9680 | SU Sudo Sudo Project | 3.3 | Apr 24 | sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not… |
| CVE-2017-2806 | PD Perceptive Document Filters Lexmark | 3.3 | Apr 20 | An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality |
| CVE-2017-5190 | AM Access Manager Netiq | 3.1 | Apr 20 | NetIQ Access Manager 4.2 before SP3 HF1 and 4.3 before SP1 HF1, when configured as a SAML 2.0 Identity Server with Virtual Attributes, has a concurrency issue causing information… |
| CVE-2016-4874 | OF Office Cybozu | 3.5 | Apr 17 | Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack |
| CVE-2016-4455 | EL Enterprise Linux Desktop Redhat | 3.3 | Apr 14 | The Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses weak permissions (755) for subscription-manager cache directories, which allows… |
| CVE-2016-2567 | GN Galaxy Note 3 Firmware Samsung | 3.3 | Apr 13 | secfilter in the Samsung kernel for Android on SM-N9005 build N9005XXUGBOB6 (Note 3) and SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to bypass URL filtering… |
| CVE-2016-2565 | GS Galaxy S6 Firmware Samsung | 3.3 | Apr 13 | Samsung SecEmailSync on SM-G920F build G920FXXU2COH2 (Galaxy S6) devices allows attackers to read sent e-mail messages, aka SVE-2015-5081 |
| CVE-2016-10118 | FI Firejail Firejail Project | 3.3 | Apr 13 | Firejail allows local users to truncate /etc/resolv.conf via a chroot command to / |
| CVE-2017-3033 | AC Acrobat Adobe | 3.3 | Apr 12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling JPEG 2000 code-stream… |
| CVE-2017-3032 | AC Acrobat Adobe | 3.3 | Apr 12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 code-stream parser |
| CVE-2017-3031 | AC Acrobat Adobe | 3.3 | Apr 12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the XSLT engine |
| CVE-2017-3029 | AC Acrobat Adobe | 3.3 | Apr 12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when handling a JPEG 2000… |
| CVE-2017-3022 | AC Acrobat Adobe | 3.3 | Apr 12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability when parsing the header of a JPEG… |
| CVE-2017-3020 | AC Acrobat Adobe | 3.3 | Apr 12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the weblink module |
| CVE-2017-3021 | AC Acrobat Adobe | 3.3 | Apr 12 | Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerability in the JPEG 2000 parser engine |
| CVE-2017-0188 | WI Windows Microsoft | 3.3 | Apr 12 | A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the… |
| CVE-2017-0159 | WI Windows Microsoft | 3.7 | Apr 12 | A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats requests coming from Extranet clients as… |
| CVE-2017-5607 | SP Splunk Splunk | 3.5 | Apr 10 | Splunk Enterprise 5.0.x before 5.0.18, 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6.2.x before 6.2.13.1, 6.3.x before 6.3.10, 6.4.x before 6.4.6, and 6.5.x before 6.5.3 and Splunk… |
| CVE-2017-5686 | NB Nuc6i3syh Bios Intel | 3.9 | Apr 3 | The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version SY0059 may allow may allow an attacker with physical access to the system to gain access to… |
| CVE-2017-5685 | NB Nuc6i7kyk Bios Intel | 3.9 | Apr 3 | The BIOS in Intel NUC systems based on 6th Gen Intel Core processors prior to version KY0045 may allow may allow an attacker with physical access to the system to gain access to… |
| CVE-2017-5684 | SB Stk2mv64cc Bios Intel | 3.9 | Apr 3 | The BIOS in Intel Compute Stick systems based on 6th Gen Intel Core processors prior to version CC047 may allow an attacker with physical access to the system to gain access to… |
| CVE-2017-7407 | CU Curl Haxx | 2.4 | Apr 3 | The ourWriteOut function in tool_writeout.c in curl 7.53.1 might allow physically proximate attackers to obtain sensitive information from process memory in opportunistic… |
| CVE-2016-8757 | PF P9 Firmware Huawei | 3.3 | Apr 2 | ION memory management module in Huawei P9 phones with software EVA-AL10C00B192 and earlier versions, EVA-DL10C00B192 and earlier versions, EVA-TL10C00B192 and earlier versions,… |
| CVE-2015-2246 | PF P7-l10 Firmware Huawei | 3.3 | Apr 2 | The MeWidget module on Huawei P7 smartphones with software P7-L10 V100R001C00B136 and earlier versions could lead to the disclosure of contact information |
| CVE-2014-8571 | AP Ascend P6 Edge-c00 Firmware Huawei | 3.3 | Apr 2 | Apps on Huawei Ascend P6 mobile phones with software EDGE-U00 V100R001C17B508SP01 and earlier versions before V100R001C17B508SP02; EDGE-T00 V100R001C01B508SP01 and earlier… |
| CVE-2017-2426 | MO Mac OS X Apple | 3.3 | Apr 2 | An issue was discovered in certain Apple products |
| CVE-2017-2404 | IO iOS Apple | 3.3 | Apr 2 | An issue was discovered in certain Apple products |
| CVE-2017-2397 | IO iOS Apple | 2.4 | Apr 2 | An issue was discovered in certain Apple products |
| CVE-2017-2384 | IO iOS Apple | 3.3 | Apr 2 | An issue was discovered in certain Apple products |
| CVE-2017-2383 | IC Icloud Apple | 3.1 | Apr 2 | An issue was discovered in certain Apple products |
| CVE-2016-6349 | OC Oci-register-machine Projectatomic | 3.3 | Mar 29 | The machinectl command in oci-register-machine allows local users to list running containers and possibly obtain sensitive information by running that command |
| CVE-2016-9471 | RA Revive Adserver Revive-adserver | 3.1 | Mar 28 | Revive Adserver before 3.2.5 and 4.0.0 suffers from Special Element Injection |
| CVE-2016-6102 | SK Security Key Lifecycle Manager Ibm | 3.7 | Mar 27 | IBM Tivoli Key Lifecycle Manager 2.5 and 2.6 stores sensitive information in URL parameters |
| CVE-2015-4078 | CM Cloudera Manager Cloudera | 3.1 | Mar 23 | Cloudera Navigator 2.2.x before 2.2.4 and 2.3.x before 2.3.3 include support for SSLv3 when configured to use SSL/TLS, which makes it easier for man-in-the-middle attackers to… |
| CVE-2015-2263 | CM Cloudera Manager Cloudera | 3.3 | Mar 23 | Cloudera Manager 4.x, 5.0.x before 5.0.6, 5.1.x before 5.1.5, 5.2.x before 5.2.5, and 5.3.x before 5.3.3 uses global read permissions for files in its configuration directory when… |
| CVE-2013-6446 | CD Cdh Cloudera | 3.1 | Mar 23 | The JobHistory Server in Cloudera CDH 4.x before 4.6.0 and 5.x before 5.0.0 Beta 2, when using MRv2/YARN with HTTP authentication, allows remote authenticated users to obtain… |
| CVE-2017-5930 | LE Leap Opensuse | 2.7 | Mar 20 | The AliasHandler component in PostfixAdmin before 3.0.2 allows remote authenticated domain admins to delete protected aliases via the delete parameter to delete.php, involving a… |
| CVE-2016-9697 | RR Rational Rhapsody Design Manager Ibm | 3.1 | Mar 20 | An unspecified vulnerability in IBM Rhapsody DM 4.0, 5.0, and 6.0 could allow an attacker to perform a JSON Hijacking Attack |
| CVE-2017-0096 | WI Windows Microsoft | 2.6 | Mar 17 | Hyper-V in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2; Windows 7 SP1; Windows 8.1, Windows Server 2012 Gold and R2; Windows 10 Gold, 1511, and 1607; and Windows… |
| CVE-2017-0042 | WI Windows Microsoft | 3.1 | Mar 17 | Windows Media Player in Microsoft Windows 8.1; Windows Server 2012 R2; Windows RT 8.1; Windows 7 SP1; Windows 2008 SP2 and R2 SP1, Windows Server 2016; Windows Vista SP2; and… |
| CVE-2016-8016 | VE Virusscan Enterprise Mcafee | 3.4 | Mar 14 | Information exposure in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows authenticated remote attackers to obtain the existence of unauthorized files on… |
| CVE-2017-5985 | LX Lxc Linuxcontainers | 3.3 | Mar 14 | lxc-user-nic in Linux Containers (LXC) allows local users with a lxc-usernet allocation to create network interfaces on the host and choose the name of those interfaces by… |
| CVE-2017-1150 | DB Db2 Ibm | 3.1 | Mar 8 | IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 10.1, 10.5, and 11.1 could allow an authenticated attacker with specialized access to tables that they should not… |
| CVE-2017-1124 | MA Maximo Asset Management Ibm | 2.9 | Mar 7 | IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local attacker to obtain sensitive information using HTTP Header Injection |
| CVE-2017-5865 | OW Owncloud Owncloud | 3.7 | Mar 3 | The password reset functionality in ownCloud Server before 8.1.11, 8.2.x before 8.2.9, 9.0.x before 9.0.7, and 9.1.x before 9.1.3 sends different error messages depending on… |
| CVE-2015-2877 | KE Kernel Linux | 3.3 | Mar 3 | Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection… |
| CVE-2016-7553 | BU Buf.pl Irssi | 3.3 | Feb 27 | The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain… |