PUBLIÉES EN

août 2017

1 564 CVE, des plus récentes aux plus anciennes.

← juillet 2017 septembre 2017 →

CVE-2017-1485IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functio… 5.4 MOYENNE

CVE-2017-1428IBM Cognos Analytics 11.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could e… 6.1 MOYENNE

CVE-2017-1427IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functio… 6.1 MOYENNE

CVE-2017-1195IBM Curam Social Program Management 6.0, 6.1, 6.2, and 7.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit… 6.1 MOYENNE

CVE-2016-2980The Sametime WebPlayer 8.5.2 and 9.0 is vulnerable to a script injection where a malicious site can inject their own script by exploiting a vulnerability in the way that the WebPla… 6.3 MOYENNE

CVE-2016-2978IBM Sametime 8.5.2 and 9.0 could store potentially sensitive information from the browser cache locally that could be available to a local user. IBM X-Force ID: 113938. 3.3 FAIBLE

CVE-2016-2976IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting invitee to obtain previously cleared sensitive information by viewing the meeting report history. IBM X-Force ID: 11… 4.3 MOYENNE

CVE-2016-2975IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functi… 5.4 MOYENNE

CVE-2016-2974IBM Sametime Connect 8.5.2 and 9.0, after uninstalling the Sametime Rich Client, could disclose potentially sensitive information related to the Sametime environment as well as oth… 3.3 FAIBLE

CVE-2016-2967IBM Sametime 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Sametime away message altering the inten… 5.4 MOYENNE

CVE-2016-2966IBM Sametime 8.5.1 and 9.0 could allow an authenticated user to enumerate meeting rooms by guessing the meeting room id. IBM X-Force ID: 113847. 4.3 MOYENNE

CVE-2016-2964IBM Sametime 8.5.2 and 9.0 under certain conditions provides an error message to a user that is too detailed and may reveal details about the application. IBM X-Force ID: 113813. 5.3 MOYENNE

CVE-2016-0358IBM Sametime 8.5.2 and 9.0 could allow an unauthorized authenticated user to enumerate group chat ID numbers and join meetings that he was not invited to. IBM X-Force ID: 111928. 4.3 MOYENNE

CVE-2017-3155Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to cross frame scripting. 6.1 MOYENNE

CVE-2017-3154Les versions 0.6.0-incubating et 0.7.0-incubating d'Apache Atlas divulguent des traces de pile système détaillées dans leurs réponses d'erreur. Un attaquant non authentifié disposa… 7.5 ÉLEVÉE

CVE-2017-3153Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality. 6.1 MOYENNE

CVE-2017-3152Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to DOM XSS in the edit-tag functionality. 6.1 MOYENNE

CVE-2017-3151Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality. 6.1 MOYENNE

CVE-2017-3150Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script. 6.1 MOYENNE

CVE-2016-8752Les versions 0.6.0 à 0.7.1 d'Apache Atlas sont affectées par une faille de traversée de répertoire dans l'application web. Un attaquant distant non authentifié peut visualiser le c… 7.5 ÉLEVÉE

CVE-2014-9497Les versions du lecteur audio mpg123 antérieures à la 1.18.0 sont vulnérables à un dépassement de tampon lors du traitement de certains fichiers. Un attaquant distant peut provoque… 7.5 ÉLEVÉE

CVE-2013-7433Cross-site scripting (XSS) vulnerability in the Googlemaps plugin before 3.1 for Joomla!. 6.1 MOYENNE

CVE-2013-7432Les sites Joomla! utilisant la version 3.0 ou antérieure de l'extension Googlemaps sont concernés. Un attaquant distant non authentifié peut contourner les restrictions de sécurité… 7.5 ÉLEVÉE

CVE-2013-7431Full path disclosure in the Googlemaps plugin before 3.1 for Joomla!. 5.3 MOYENNE

CVE-2013-7426Les serveurs SIP Kamailio en version 4.0.1 sont affectés par une faille dans la gestion des fichiers temporaires. Un attaquant distant non authentifié peut exploiter cette vulnérab… 9.8 CRITIQUE

CVE-2016-2979IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the … 5.4 MOYENNE

CVE-2016-2977IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a malicious user to lower other users hands in the meeting. IBM X-Force ID: 113937. 4.3 MOYENNE

CVE-2016-2973IBM Sametime Media Services 8.5.2 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the … 5.4 MOYENNE

CVE-2016-2972IBM Sametime Meeting Server (versions 8.5.2 et 9.0) stocke incorrectement les identifiants des utilisateurs dans le cache local du navigateur. Une personne ayant un accès local à l… 7.8 ÉLEVÉE

CVE-2016-2971IBM Sametime Media Services 8.5.2 and 9.0 can disclose sensitive information in stack trace error logs that could aid an attacker in future attacks. IBM X-Force ID: 113898. 5.3 MOYENNE

CVE-2016-2969IBM Sametime Meeting Server 8.5.2 and 9.0 may send replies that contain emails of people that should not be in these messages. IBM X-Force ID: 113850. 4.3 MOYENNE

CVE-2016-2965IBM Sametime Meeting Server 8.5.2 and 9.0 is vulnerable to cross-site request forgery, caused by improper validation of user-supplied input. By persuading a user to visit a malicio… 6.5 MOYENNE

CVE-2016-2959IBM Sametime Meeting Server 8.5.2 and 9.0 could allow a meeting room manager to remove the primary managers privileges. IBM X-Force ID: 113804. 4.3 MOYENNE

CVE-2016-10503IBM Sametime Meeting Server 8.5.2 and 9.0 could allow an authenticated and invited user of Sametime meeting to lower any or all hands in an e-meeting, thus spoofing results of vote… 4.3 MOYENNE

CVE-2016-0356IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease throug… 6.5 MOYENNE

CVE-2016-0355IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user that has been invited to a Sametime meeting room, to cause the screen sharing to cease throug… 6.5 MOYENNE

CVE-2016-0354IBM Sametime Enterprise Meeting Server 8.5.2 and 9.0 could allow an authenticated user to upload a malicious file to a Sametime meeting room, that could be downloaded by unsuspecti… 5.5 MOYENNE

CVE-2017-13673The vga display update in mis-calculated the region for the dirty bitmap snapshot in case split screen mode is used causing a denial of service (assertion failure) in the cpu_physi… 6.5 MOYENNE

CVE-2017-12865Les versions 1.34 et antérieures de ConnMan sont affectées par une faille de corruption de mémoire dans le composant proxy DNS. Un attaquant distant peut envoyer une réponse DNS sp… 9.8 CRITIQUE

CVE-2017-12875The WritePixelCachePixels function in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (CPU consumption) via a crafted file. 6.5 MOYENNE

CVE-2017-12867The SimpleSAML_Auth_TimeLimitedToken class in SimpleSAMLphp 1.14.14 and earlier allows attackers with access to a secret token to extend its validity period by manipulating the pre… 5.9 MOYENNE

CVE-2017-12856Cross-site scripting (XSS) vulnerability in C.P.Sub 5.2 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter to index.php. 6.1 MOYENNE

CVE-2017-12797Integer overflow in the INT123_parse_new_id3 function in the ID3 parser in mpg123 before 1.25.5 on 32-bit platforms allows remote attackers to cause a denial of service via a craft… 5.5 MOYENNE

CVE-2017-12775Les installations de Question2Answer antérieures à la version 1.7.5 sont affectées par une faille dans le script d'installation. Un attaquant distant peut utiliser cette vulnérabil… 7.5 ÉLEVÉE

CVE-2017-12763Les versions de l'utilitaire serveur NoMachine antérieures à la 5.3.10 sur Linux et Mac OS X sont concernées. Un attaquant disposant d'un compte utilisateur standard peut exploiter… 8.8 ÉLEVÉE

CVE-2017-12422NetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10.4.0.2 allow remote authenticated users to delete arbitrary objects via unspecified … 6.5 MOYENNE

CVE-2017-11455Les passerelles VPN Pulse Connect Secure et Pulse Policy Secure sont affectées par l'absence d'un jeton de sécurité dans l'interface de diagnostic. Un attaquant peut inciter un adm… 8.8 ÉLEVÉE

CVE-2015-8334Les systèmes Huawei VCN500 utilisant des versions antérieures à la V100R002C00SPC201 sont vulnérables à une injection SQL au sein de l'unité d'exploitation et de maintenance (Opera… 8.8 ÉLEVÉE

CVE-2015-8299KNX ETS 4.1.5 (Build 3246) est affecté via son moniteur de messages de groupe (Falcon). Un attaquant distant peut exécuter du code arbitraire sur le système en envoyant un paquet U… 9.8 CRITIQUE

CVE-2015-7517Les sites WordPress utilisant l'extension Double Opt-In for Download (versions antérieures à 2.0.9) sont vulnérables aux injections SQL. Un attaquant distant peut exécuter des comm… 9.8 CRITIQUE