| 104897 | EMC RSA Authentication Manager < 8.2 SP1 Patch 6 Stored Cross-Site Scripting (ESA-2017-152) | medium |
| 104888 | Veritas NetBackup Appliance < 2.7.2 / 3.1.0 Multiple Vulnerabilities (VTS17-003) | critical |
| 104850 | Splunk Enterprise 6.3.x < 6.3.12 / 6.4.x < 6.4.9 / 6.5.x < 6.5.6 / 6.6 < 6.6.3.2 or 6.6.4 / 7.0.x < 7.0.0.1 Multiple SAML Implementation Vulnerabilities | critical |
| 104659 | Vanilla Forums Header Injection Remote Code Execution | high |
| 104655 | Zabbix 3.0.x < 3.0.13 / 3.2.x < 3.2.10 / 3.4.x < 3.4.4 Multiple Vulnerabilities | high |
| 104634 | Jenkins < 2.73.3 / 2.89 Multiple Vulnerabilities | high |
| 104633 | PHP 7.1.x < 7.1.11 Multiple Vulnerabilities | critical |
| 104632 | PHP 7.0.x < 7.0.25 Multiple Vulnerabilities | critical |
| 104631 | PHP 5.6.x < 5.6.32 Multiple Vulnerabilities | critical |
| 104572 | Adobe Connect <= 9.6.2 Multiple Vulnerabilities (APSB17-35) | critical |
| 104571 | ONVIF Snapshot Username and Password Leak | medium |
| 104478 | Joomla! 1.5.0 < 3.8.2 Multiple Vulnerabilities | critical |
| 104391 | EMC VMAX VASA Provider Virtual Appliance < 8.4.0.512 Authentication Bypass Vulnerability | critical |
| 104390 | EMC Unisphere for VMAX Virtual Appliance < 8.4.0.15 Authentication Bypass Vulnerability | critical |
| 104389 | EMC Solutions Enabler Virtual Appliance < 8.4.0.15 Authentication Bypass Vulnerability | critical |
| 104380 | EMC RSA Authentication Manager < 8.2 SP1 Patch 5 Reflected Cross-Site Scripting (ESA-2017-134) | medium |
| 104356 | WordPress < 4.8.3 Multiple Vulnerabilities | critical |
| 104353 | Apache Solr 5.x < 5.5.5 / 6.x < 6.6.2 / 7.x < 7.1.0 Multiple Vulnerabilities | critical |
| 104276 | ONVIF Username and Password leak | medium |
| 104144 | MVPower DVR Remote Command Execution | critical |
| 104129 | Linksys E1500/E2500 Authenticated Command Execution | critical |
| 104128 | NETGEAR DGN Remote Unauthenticated Command Execution | critical |
| 104126 | D-Link DIR-300L/600L Remote Command Execution | critical |
| 104124 | Vocran NVR Remote Command Execution | critical |
| 104104 | IBM OpenAdmin Tool welcomeService.php Remote Code Execution | critical |
| 104102 | AVTech Multiple Vulnerabilities | critical |
| 104047 | Oracle Integrated Lights Out Manager (ILOM) < 3.2.6 Multiple Vulnerabilities (uncredentialed check) | high |
| 103987 | Oracle WebCenter Content Server Component Unspecified Issue (October 2017 CPU) | high |
| 103928 | NUUO NVR Web Interface RCE | critical |
| 103874 | SolarWinds Log and Event Manager < 6.3.1 Hotfix 4 Insecure HTTP Update Download MitM Code Execution | high |
| 103818 | EMC RSA Archer < 6.2.0.5 Multiple Vulnerabilities | high |
| 103789 | D-Link DIR Router Authenication Bypass | high |
| 103732 | HP UCMDB Server BeanUtils Java Deserialization RCE | high |
| 103568 | IBM WebSphere Portal (swg22008586) | high |
| 103536 | MySQL Enterprise Monitor 3.2.x < 3.2.9.2249 / 3.3.x < 3.3.5.3292 / 3.4.x < 3.4.3.4225 Multiple Vulnerabilities (October 2017 CPU) | high |
| 103513 | Grandstream Phone Web UI Information Disclosure | medium |
| 103504 | Apache Solr < 6.6.1 Kerberos Plugin Delegation Token Handling Remote Information Disclosure | high |
| 103467 | Citrix NetScaler Authentication Bypass Vulnerability (CTX227928) | high |
| 103383 | Joomla! 1.5.0 < 3.8.0 Multiple Vulnerabilities | critical |
| 103382 | EMC Data Protection Advisor < 6.4.130 Hardcoded Password Vulnerability | critical |
| 103358 | WordPress < 4.8.2 Multiple Vulnerabilities | critical |
| 103219 | D-Link DIR Router Missing Authentication Check | critical |
| 103188 | IBM BigFix Remote Control < 9.1.4 Authentication Bypass | high |
| 103114 | D-Link DIR 850L Router Local File Inclusion | critical |
| 103054 | Ivanti Policy Secure Detection | info |
| 103050 | Western Digital TV Multiple Vulnerabilities | high |
| 102978 | Cisco Unified Operations Manager 8.6 SQL Injection Vulnerability | medium |
| 102977 | Apache Struts 2 REST Plugin XStream XML Request Deserialization RCE | high |
| 102959 | HP Operations Orchestration 10.x < 10.80 Remote Code Execution | critical |
| 102918 | Apache Struts 2.3.x Struts 1 plugin RCE (remote) | critical |
