Skip to content
OpenAdvisories

Archive

13 June 2017

Vulnerabilities first published on this day (UTC), newest first.

← May 2017 2017 / June /13 July 2017 →
  1. 113
  2. 234
  3. 39
  4. 43
  5. 529
  6. 649
  7. 759
  8. 868
  9. 968
  10. 10 
  11. 113
  12. 1227
  13. 13121
  14. 1437
  15. 15112
  16. 1674
  17. 172
  18. 182
  19. 1938
  20. 2031
  21. 2132
  22. 2219
  23. 2313
  24. 247
  25. 2510
  26. 2629
  27. 2753
  28. 2818
  29. 2938
  30. 3035
All Critical High Medium Low Exploited only Public exploit

121 results · Feed

  • Critical 9.8
    CVE-2017-4992

    Cloud Foundry UAA privilege escalation with user invitations

    An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release (uaa…

    org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Unscored —
    CVE-2017-4994

    An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior t…

  • Medium 5.9
    CVE-2017-4971 Public exploit EPSS 15%

    Insecure Default Initialization of Resource in Pivotal Spring Web Flow

    An issue was discovered in Pivotal Spring Web Flow through 2.4.4. Applications that do not change the value of the MvcViewFactoryCreator useSpringBinding property which is disabled by default (i.e., set to 'false') can be vulnerable to malicious EL expression…

    org.springframework.webflow:spring-webflow Maven
  • Unscored —
    CVE-2017-4965

    An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions …

    rabbitmq-server rabbitmq-server Debian Ubuntu
  • Unscored —
    CVE-2017-4955

    An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, …

  • Unscored —
    CVE-2017-4959

    An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7…

  • High 7.2
    CVE-2017-4991

    Cloud Foundry UAA password reset vulnerability

    An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x versions prior to v3.6.10, 3.9.x versions prior to v3.9.12, and other versions prior to v3.17.0; and UAA bosh release (ua…

    org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Unscored —
    CVE-2017-4963

    An issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier versions, UAA stand-alone re…

  • Unscored —
    CVE-2017-4967

    An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions …

    rabbitmq-server rabbitmq-server Debian Ubuntu
  • High 8.8
    CVE-2017-4973

    Cloud Foundry UAA Privilege Escalation

    An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x versions prior to v3.6.8, 3.9.x versions prior to v3.9.10, and other versions prior to v3.15.0; and UAA bosh release (uaa…

    org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Unscored —
    CVE-2017-6680

    A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remot…

  • Unscored —
    CVE-2017-6688

    A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an aff…

  • Unscored —
    CVE-2017-6692

    A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log …

  • Unscored —
    CVE-2017-6668

    Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticate…

  • Unscored —
    CVE-2017-6671

    A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could …

  • Unscored —
    CVE-2017-6681

    A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, r…

  • Unscored —
    CVE-2017-6693

    A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local…

  • Unscored —
    CVE-2017-6696

    A vulnerability in the file system of Cisco Elastic Services Controllers could allow an authenticated, local attacker t…

  • Unscored —
    CVE-2017-6691

    A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to…

  • Unscored —
    CVE-2017-6684

    A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an aff…

  • Unscored —
    CVE-2017-6670

    A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, rem…

  • Unscored —
    CVE-2017-6683

    A vulnerability in the esc_listener.py script of Cisco Elastic Services Controllers could allow an authenticated, remot…

  • Unscored —
    CVE-2017-6659

    A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthentic…

  • Unscored —
    CVE-2017-6687

    A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with ac…

  • Unscored —
    CVE-2017-6673

    A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user infor…

  • Unscored —
    CVE-2017-6661

    A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) and Cisco Content Securit…

  • Unscored —
    CVE-2017-6685

    A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with acc…

  • Unscored —
    CVE-2017-6689

    A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to…

  • Unscored —
    CVE-2017-6697

    A vulnerability in the web interface of Cisco Elastic Services Controllers could allow an authenticated, remote attacke…

  • Unscored —
    CVE-2017-6674

    A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unaut…

  • Unscored —
    CVE-2017-6690

    A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco Star…

  • Unscored —
    CVE-2017-6667

    A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (S…

  • Unscored —
    CVE-2017-6682

    A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to…

  • Unscored —
    CVE-2017-6655

    A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow a…

  • Unscored —
    CVE-2017-6675

    A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attack…

  • Unscored —
    CVE-2017-6695

    A vulnerability in the ConfD server in Cisco Ultra Services Platform could allow an authenticated, local attacker to vi…

  • Unscored —
    CVE-2017-6694

    A vulnerability in the Virtual Network Function Manager's (VNFM) logging function of Cisco Ultra Services Platform coul…

  • Unscored —
    CVE-2017-6656

    A vulnerability in Session Initiation Protocol (SIP) call handling of Cisco IP Phone 8800 Series devices could allow an…

  • Unscored —
    CVE-2017-6666

    A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Se…

  • Unscored —
    CVE-2017-6686

    A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with ac…