Archive
8 June 2017
Vulnerabilities first published on this day (UTC), newest first.
68 results · Feed
-
Unscored —
The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated us…
-
Unscored —
Curam Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4 before 6.0.4.6, and 6.0.…
-
Unscored —
Buffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2.1 HF15, 11.3.x, 11.4.…
-
Unscored —
Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root…
-
Unscored —
Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a…
-
High 7.5
The gmp plugin in strongSwan before 5.5.3 does not properly validate RSA public keys before calling mpz_powm_sec, which…
-
High 7.5
The ASN.1 parser in strongSwan before 5.5.3 improperly handles CHOICE types when the x509 plugin is enabled, which allo…
-
Unscored —
QEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest OS privileged users to …
-
Unscored —
QEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to …
-
Unscored —
The AMF unmarshallers in Red5 Media Server before 1.0.8 do not restrict the classes for which it performs deserializati…
-
Unscored —
atmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account.
-
Unscored —
The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service…
-
Unscored —
atmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all emails.
-
Unscored —
atmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV.
-
Unscored —
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds r…
-
Unscored —
VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6…
-
Unscored —
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds w…
-
Unscored —
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple heap buffer-ove…
-
Unscored —
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow v…
-
Unscored —
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds r…
-
Unscored —
The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 h…
-
Unscored —
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an integer-overflow vuln…
-
Unscored —CVE-2017-6639 EPSS 35%
A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center Network Manager (DCNM)…
-
Unscored —
A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an aut…
-
Unscored —
A vulnerability in the Session Initiation Protocol (SIP) of the Cisco TelePresence Codec (TC) and Collaboration Endpoin…
-
Unscored —
A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attac…
-
Medium 5.4CVE-2017-9516 Public exploit
Craft CMS XSS Vulnerability
Craft CMS before 2.6.2982 allows for a potential XSS attack vector by uploading a malicious SVG file.
-
Unscored —CVE-2017-7180 Public exploit
Net Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security Feature Bypass of its…