Skip to content
OpenAdvisories

Archive

22 June 2017

Vulnerabilities first published on this day (UTC), newest first.

19 results · Feed

  • Unscored —

    ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with weak entropy. Success…

  • High 8.1

    An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure …

  • High 8.1

    An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure …

  • Medium 6.5

    An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b…

  • Unscored —

    Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote a…

  • Unscored —

    Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of …

  • Unscored —
    CVE-2015-9098 Public exploit EPSS 14%

    In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Mo…

  • Unscored —

    IBM RELM 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…

  • Unscored —

    IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such…

  • Unscored —

    IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view file…

  • Unscored —

    IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to …

  • Unscored —

    IdeaBlade Breeze Breeze.Server.NET before 1.6.5 allows remote attackers to execute arbitrary code, related to use of Ty…

  • Unscored —

    In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a malloc operation, which…

  • Unscored —
    CVE-2017-0176 EPSS 46%

    A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 t…

  • Unscored —
    CVE-2012-6706 EPSS 10%

    A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engi…

  • Unscored —
    CVE-2017-3629 Public exploit

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions …

  • Unscored —
    CVE-2017-3631 Public exploit

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versi…

  • Unscored —
    CVE-2017-3630 Public exploit

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions …

  • Unscored —

    An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/c…