Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2017-10-24	CVE-2017-15873	Integer Overflow or Wraparound vulnerability in multiple products The get_next_block function in archival/libarchive/decompress_bunzip2.c in BusyBox 1.27.2 has an Integer Overflow that may lead to a write access violation. local low complexity busybox debian canonical CWE-190	5.5
2017-10-22	CVE-2017-15722	Out-of-bounds Read vulnerability in multiple products In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string. network high complexity irssi debian CWE-125	5.9
2017-10-19	CVE-2017-15642	Use After Free vulnerability in multiple products In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AIFF file. local low complexity sound-exchange-project debian CWE-416	5.5
2017-10-19	CVE-2017-10384	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). network low complexity oracle mariadb debian netapp redhat	6.5
2017-10-19	CVE-2017-10379	Incorrect Authorization vulnerability in multiple products Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). network low complexity oracle mariadb debian redhat netapp CWE-863	6.5
2017-10-19	CVE-2017-10378	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). network low complexity oracle mariadb debian redhat netapp	6.5
2017-10-19	CVE-2017-10357	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). network low complexity oracle redhat netapp debian	5.3
2017-10-19	CVE-2017-10356	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). local low complexity oracle redhat netapp debian	6.2
2017-10-19	CVE-2017-10355	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). network low complexity oracle redhat netapp debian	5.3
2017-10-19	CVE-2017-10350	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). network low complexity oracle redhat netapp debian	5.3