Skip to content
OpenAdvisories

Archive

20 June 2017

Vulnerabilities first published on this day (UTC), newest first.

31 results · Feed

  • Unscored —

    Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF parsin…

  • Unscored —

    Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability …

  • Unscored —
    CVE-2017-3078 Public exploit EPSS 31%

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Tex…

  • Unscored —
    CVE-2017-3077 Public exploit EPSS 22%

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image…

  • Unscored —
    CVE-2017-3081 EPSS 16%

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal com…

  • Unscored —

    Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF proces…

  • Unscored —

    Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz re…

  • Unscored —

    Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtim…

  • Unscored —

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising …

  • Unscored —

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating t…

  • Unscored —

    Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability …

  • Unscored —

    Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that co…

  • Unscored —

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal …

  • Unscored —

    Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the bitmap rep…

  • Unscored —

    Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploit…

  • Unscored —
    CVE-2017-3082 EPSS 12%

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID …

  • Unscored —
    CVE-2017-3083 EPSS 16%

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SD…

  • Unscored —
    CVE-2017-3076 Public exploit EPSS 25%

    Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AV…

  • Unscored —

    Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF imagin…

  • Unscored —

    Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability …

  • Unscored —

    Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character …

  • Unscored —
    CVE-2017-7668 EPSS 57%

    The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which a…

  • Unscored —
    CVE-2017-7679 Public exploit EPSS 39%

    In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when s…

  • Unscored —
    CVE-2017-3167 EPSS 20%

    In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules o…

  • Unscored —
    CVE-2017-3169 EPSS 20%

    In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party mo…

  • Unscored —

    In Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a non-administrative use…

  • Unscored —

    The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary.

  • Unscored —

    WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication byp…

  • Unscored —

    If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo Tools…

  • Unscored —

    In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in t…

  • Unscored —

    The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. This bearer token, …