Archive
21 June 2017
Vulnerabilities first published on this day (UTC), newest first.
32 results · Feed
-
Unscored —CVE-2016-7508 Public exploit
Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL c…
-
Unscored —
In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote…
-
Unscored —
In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may levera…
-
Unscored —
EMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege escalation vulnerability t…
-
Unscored —
Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates…
-
Unscored —
Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsun…
-
Unscored —
JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) …
-
Critical 9.8
Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credential…
-
Unscored —CVE-2017-7922 Public exploit
An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strin…
-
Unscored —CVE-2017-7918 Public exploit
An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuratio…
-
Unscored —
A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to proper…
-
Unscored —
A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. A cross-site scripting vuln…
-
Unscored —
An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed wit…
-
Unscored —
A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The client does not properl…
-
High 8.8
An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A special…
-
Unscored —
IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a denial of service to the MQXR channel when tr…
-
Unscored —
IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Stora…
-
Unscored —
Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request. Exploitation requires authen…
-
Unscored —
Denial of Service was found in Horde_Image 2.x before 2.5.0 via a crafted URL to the "Null" image driver.
-
Unscored —
A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to 1.4.0p6, allowing an unauthentic…
-
Unscored —
In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriat…
-
Critical 9.1
An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Cam…
-
Critical 9.8CVE-2017-2805 EPSS 26%
An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 I…
-
High 8.8
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD C…
-
High 7.7
An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD…
-
High 8.1
An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Cam…
-
High 8.8
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD C…
-
Unscored —
In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service (…
-
Unscored —
install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the database_usernam…
-
Unscored —CVE-2017-9129 Public exploit
The wav_open_read function in frontend/input.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to …
-
Unscored —CVE-2017-9130 Public exploit
The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cau…
-
Unscored —
GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in a…