Archive
20 June 2017
Vulnerabilities first published on this day (UTC), newest first.
31 results · Feed
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF parsin…
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability …
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Tex…
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image…
-
Unscored —CVE-2017-3081 EPSS 16%
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal com…
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF proces…
-
Unscored —
Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz re…
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtim…
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising …
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating t…
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability …
-
Unscored —
Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that co…
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal …
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the bitmap rep…
-
Unscored —
Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploit…
-
Unscored —CVE-2017-3082 EPSS 12%
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID …
-
Unscored —CVE-2017-3083 EPSS 16%
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SD…
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AV…
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF imagin…
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability …
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character …
-
Unscored —CVE-2017-7668 EPSS 57%
The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which a…
-
Unscored —
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when s…
-
Unscored —CVE-2017-3167 EPSS 20%
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules o…
-
Unscored —CVE-2017-3169 EPSS 20%
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party mo…
-
Unscored —
In Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a non-administrative use…
-
Unscored —
The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary.
-
Unscored —
WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication byp…
-
Unscored —
If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo Tools…
-
Unscored —
In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in t…
-
Unscored —
The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. This bearer token, …