漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for mingw-c-ares to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. 解决方案 Fedora has issued updated packages to …

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for seamonkey to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Fedora has issued updated packages to fix this vulnerability. …

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for glpi to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious users could also use this vulnerability t…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for webkitgtk4 to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious users could also use this vulnerabi…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for open-vm-tools to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 Successful exploitation allows attacker to compromise the system. 解决方案 Fedora has issued updated packages to fix this vulnerabili…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for rt to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 Malicious users could use this vulnerability to change partial contents or configuration on the system. 解决方案 Fedora has issued updated packa…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for php-phpmailer to fix the vulnerability. Affected OS: Fedora 25 Fedora 24 漏洞危害 Malicious users could use this vulnerability to change partial contents or configuration on the system. 解决方案 Fedora has…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for evince to fix the vulnerability. Affected OS: Fedora 24 漏洞危害 解决方案 Fedora has issued updated packages to fix this vulnerability. Updates can be installed using the yum utility, which can be download…

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for mingw-librsvg2 to fix the vulnerability. Affected OS: Fedora 25 Fedora 24 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious users could also use …

漏洞类别：Fedora 漏洞等级： 漏洞信息 Fedora has released security update for runc.gitc5ec254 to fix the vulnerability. Affected OS: Fedora 25 漏洞危害 This vulnerability could be exploited to gain partial access to sensitive information. Malicious users could also use this vuln…

漏洞类别：Local 漏洞等级： 漏洞信息 IBM WebSphere Application Server is designed to facilitate the creation of various enterprise Web applications. IBM WebSphere Application Server is vulnerable to information disclosure vulnerability. Affected Versions: IBM WebSphere Appli…

漏洞类别：Local 漏洞等级： 漏洞信息 IBM WebSphere Application Server is designed to facilitate the creation of various enterprise Web applications. IBM WebSphere Application Server has multiple vulnerabilities in the HTTP Server. Affected Versions: IBM WebSphere Application…

漏洞类别：Local 漏洞等级： 漏洞信息 Apache Struts is an open-source Model-View-Controller (MVC) framework for creating elegant, modern Java web applications. Apache Struts is prone to a security-bypass vulnerability. Affected software: Apache Struts 2 before 2.3.29 and 2.5.…

漏洞类别：Web server 漏洞等级： 漏洞信息 Serviio is a free media server. It allows you to stream your media files (music, video or images) to renderer devices (e.g. a TV set, Bluray player, games console or mobile phone) on your connected home network. The vulnerabilities f…

漏洞类别：Internet Explorer 漏洞等级： 漏洞信息 This update addresses vulnerabilities which are described in the Adobe Security Bulletin APSB17-23, if installed on any supported edition of Microsoft Windows 10 Version 1607, Windows 10 Version 1511, Windows 10 Version 1703, …

漏洞类别：Office Application 漏洞等级： 漏洞信息 A cross-site scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server.(CVE-2017-8654) This security updates contain foll…

漏洞类别：Windows 漏洞等级： 漏洞信息 Microsoft Edge suffers multiple security vulnerabilities. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Microsoft Edge. Many memory corruption vulnerabilities …

漏洞类别：Windows 漏洞等级： 漏洞信息 An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services when it improperly enforces permissions. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL …

漏洞类别：Internet Explorer 漏洞等级： 漏洞信息 Internet Explorer is a web-browser developed by Microsoft which is included in Microsoft Windows Operating Systems. Microsoft has released Cumulative Security Updates for Internet Explorer which addresses various vulnerabiliti…

漏洞类别：RedHat 漏洞等级： 漏洞信息 Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. The Realm implementations did not process the supplied password if the supplied user name did not exist. This made a timing attack possibl…

漏洞类别：RedHat 漏洞等级： 漏洞信息 The evince packages provide a simple multi-page document viewer for Portable Document Format (PDF), PostScript (PS), Encapsulated PostScript (EPS) files, and, with additional back-ends, also the Device Independent File format (DVI) files…

漏洞类别：RedHat 漏洞等级： 漏洞信息 The Ghostscript suite contains utilities for rendering PostScript and PDF documents. A NULL pointer dereference flaw was found in ghostscript's mem_get_bits_rectangle function. A specially crafted postscript document could cause a crash …

漏洞类别：RedHat 漏洞等级： 漏洞信息 The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. It was discovered that the DCG implementation in the RMI component of OpenJDK failed to correctly handle refe…

漏洞类别：RedHat 漏洞等级： 漏洞信息 Log4j is a tool to help the programmer output log statements to a variety of output targets. It was found that when using remote logging with log4j socket server the log4j server would deserialize any log event received via TCP or UDP. A…

漏洞类别：RedHat 漏洞等级： 漏洞信息 The kernel packages contain the Linux kernel, the core of any Linux operating system. The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lacked certain checks for the end of a buffer. A remote attacker could t…