Archive

9 June 2017

Vulnerabilities first published on this day (UTC), newest first.

← May 2017 2017 / June /9 July 2017 →

All Critical High Medium Low Exploited only Public exploit

68 results · Feed

Unscored —

CVE-2017-5004

EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance ve…

Jun 9, 2017
Unscored —

CVE-2017-5003

EMC RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2 (all patch levels); RSA Via Lifecycle and Governance ve…

Jun 9, 2017
Unscored —

CVE-2017-0375

The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the …

Jun 9, 2017
Unscored —

CVE-2017-0376

The hidden-service feature in Tor before 0.3.0.8 allows a denial of service (assertion failure and daemon exit) in the …

tor tor tor Debian Ubuntu Alpine

Jun 9, 2017
Unscored —

CVE-2016-7835

Use-after-free vulnerability in H2O allows remote attackers to cause a denial-of-service (DoS) or obtain server certifi…

Kazuho Oku H2O

Jun 9, 2017
Unscored —

CVE-2016-7801

Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via un…

Cybozu Cybozu Garoon

Jun 9, 2017
Unscored —

CVE-2016-7831

Sleipnir 4 Black Edition for Mac 4.5.3 and earlier and Sleipnir 4 for Mac 4.5.3 and earlier (Mac App Store) may allow a…

Fenrir Sleipnir 4 for Mac Sleipnir 4 Black Edition for Mac

Jun 9, 2017
Unscored —

CVE-2016-7807

I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to acces…

I-O DATA DEVICE WFS-SR01

Jun 9, 2017
Unscored —

CVE-2016-7824

Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restri…

BUFFALO WNC01WH

Jun 9, 2017
Unscored —

CVE-2016-7823

Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenti…

BUFFALO WNC01WH

Jun 9, 2017
Unscored —

CVE-2016-7817

Cross-site scripting vulnerability in Simple keitai chat 2.0 and earlier allows remote attackers to inject arbitrary we…

LEMON-S PHP Simple keitai chat

Jun 9, 2017
Unscored —

CVE-2016-7813

Cross-site scripting vulnerability in DERAEMON-CMS version 0.8.9 and earlier allows remote attackers to inject arbitrar…

TEAM DERAEMONS DERAEMON-CMS

Jun 9, 2017
Unscored —

CVE-2016-7811

Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restr…

Corega CG-WLR300NX

Jun 9, 2017
Unscored —

CVE-2016-7802

Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitra…

Jun 9, 2017
Unscored —

CVE-2016-7805

The mobiGate App for Android version 2.2.1.2 and earlier and mobiGate App for iOS version 2.2.4.1 and earlier do not ve…

Nihon Unisys mobiGate App for Android mobiGate App for iOS Android iOS

Jun 9, 2017
Unscored —

CVE-2016-7821

Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service a…

BUFFALO WNC01WH

Jun 9, 2017
Unscored —

CVE-2016-7837

Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used…

BlueZ Project BlueZ bluez bluez Debian Ubuntu

Jun 9, 2017
Unscored —

CVE-2016-7826

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authentic…

BUFFALO WNC01WH

Jun 9, 2017
Unscored —

CVE-2016-7819

I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an…

I-O DATA DEVICE TS-WRLA TS-WRLP

Jun 9, 2017
Unscored —

CVE-2016-7818

Untrusted search path vulnerability in Installers for Specification check program (social insurance) Ver. 9.00 and earl…

Japan Pension Service Intstaller for TODOKESHO print program Intstaller for TODOKESHO creation program Intstaller for Specification check program(social insurance)

Jun 9, 2017
Unscored —

CVE-2016-7806

I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via …

I-O DATA DEVICE WFS-SR01

Jun 9, 2017
Unscored —

CVE-2016-7832

Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu De…

Cybozu Cybozu Dezie

Jun 9, 2017
Unscored —

CVE-2016-7838

Untrusted search path vulnerability in WinSparkle versions prior to 0.5.3 allows remote attackers to execute arbitrary …

WinSparkle WinSparkle

Jun 9, 2017
Unscored —

CVE-2016-7808

Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary we…

Corega CG-WLBARGNL CG-WLBARGMH

Jun 9, 2017
Unscored —

CVE-2016-7833

Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu De…

Cybozu Cybozu Dezie

Jun 9, 2017
Unscored —

CVE-2016-7820

Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 an…

I-O DATA DEVICE TS-WRLA TS-WRLP

Jun 9, 2017
Unscored —

CVE-2016-7825

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authentic…

BUFFALO WNC01WH

Jun 9, 2017
Unscored —

CVE-2016-7803

SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitr…

Cybozu Cybozu Garoon

Jun 9, 2017
Critical 9.8

CVE-2016-7836 Exploited EPSS 19%

SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on th…

Sky SKYSEA Client View

Jun 9, 2017
KEV Oct 14, 2025
Unscored —

CVE-2016-7814

I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow rem…

I-O DATA DEVICE TS-WRLA TS-WRLP

Jun 9, 2017
Unscored —

CVE-2016-7810

Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administra…

Corega CG-WLR300NX

Jun 9, 2017
Unscored —

CVE-2016-7822

Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier al…

BUFFALO WNC01WH

Jun 9, 2017
Unscored —

CVE-2016-7830

Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51…

Sony PCS-XG100 PCS-XG100C PCS-XG77S

Jun 9, 2017
Unscored —

CVE-2016-7816

The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allo…

Cybozu kintone mobile for Android Android

Jun 9, 2017
Unscored —

CVE-2016-7809

Cross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote atta…

Corega CG-WLR300NX

Jun 9, 2017
Unscored —

CVE-2016-4906

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web scri…

Cybozu Cybozu Garoon

Jun 9, 2017
Unscored —

CVE-2016-4907

Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors.

Cybozu Cybozu Garoon

Jun 9, 2017
Unscored —

CVE-2016-4908

Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete anot…

Cybozu Cybozu Garoon

Jun 9, 2017
Unscored —

CVE-2016-4909

Cross-site request forgery (CSRF) vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to hijack the a…

Cybozu Cybozu Garoon

Jun 9, 2017
Unscored —

CVE-2016-4902

Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software (for …

Japan Agency for Local Authority Information Systems The Public Certification Service for Individuals "The JPKI user's software" Windows

Jun 9, 2017