Skip to content
OpenAdvisories

Archive

June 2017

Vulnerabilities first published in this month (UTC), newest first.

← May 2017 2017 / June July 2017 →
  1. 113
  2. 234
  3. 39
  4. 43
  5. 529
  6. 649
  7. 759
  8. 868
  9. 968
  10. 10 
  11. 113
  12. 1227
  13. 13121
  14. 1437
  15. 15112
  16. 1674
  17. 172
  18. 182
  19. 1938
  20. 2031
  21. 2132
  22. 2219
  23. 2313
  24. 247
  25. 2510
  26. 2629
  27. 2753
  28. 2818
  29. 2938
  30. 3035
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Critical 9.8
    CVE-2017-7903

    A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100 programmable-log…

  • Critical 9.8
    CVE-2017-7898

    An Improper Restriction of Excessive Authentication Attempts issue was discovered in Rockwell Automation Allen-Bradley …

  • Critical 9.8
    CVE-2017-6034

    Schneider Electric Modicon Modbus Protocol Authentication Bypass by Capture-replay

    An authentication bypass by capture-replay issue was discovered in Schneider Electric Modicon Modbus Protocol. Sensitive information is transmitted in cleartext in the Modicon Modbus protocol, which may allow an attacker to replay the following commands: run,…

    Schneider Electric Modicon Modbus Protocol ICS / OT
  • Critical 9.8
    CVE-2015-1778

    Opendaylight will authenticate any username and password combination

    The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination.

    org.opendaylight.odlparent:opendaylight-karaf-resources Maven
  • Critical 9.8
    CVE-2017-9841 Exploited Public exploit Scanner template EPSS 100%

    Code Injection in PHPUnit

    Util/PHP/eval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "<?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., ex…

    phpunit/phpunit phpunit phpunit Debian Ubuntu Packagist
    KEV Feb 15, 2022
  • Critical 9.8
    CVE-2016-8731

    Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credential…

    Foscan Foscam C1 Webcam
  • Critical 9.1
    CVE-2017-2831

    An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Cam…

    Foscam Indoor IP Camera C1 Series
  • Critical 9.8
    CVE-2017-2805 EPSS 26%

    An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 I…

    Foscam Indoor IP Camera C1 Series
  • Critical 10.0
    CVE-2017-7876

    This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application. …

  • Critical 9.8
    CVE-2017-8543 Exploited Public exploit EPSS 74%

    Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 200…

    Microsoft Microsoft Windows Windows
    KEV May 24, 2022
  • Critical 9.8
    CVE-2017-7676

    Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character

    Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt. This can result in unintended behavior.

    Apache Software Foundation Apache Ranger org.apache.ranger:ranger Maven
  • Critical 9.8
    CVE-2017-9246

    New Relic .NET Agent contains SQL Injection

    New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during use of the Slow Queries feature, as demonstrated by a mishandled quote in a VALUES clause of an INSERT statement, after b…

    NewRelic.Agent NuGet
  • Critical 9.8
    CVE-2017-4992

    Cloud Foundry UAA privilege escalation with user invitations

    An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x versions prior to v3.6.11, 3.9.x versions prior to v3.9.13, and other versions prior to v4.2.0; and UAA bosh release (uaa…

    org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Critical 9.8
    CVE-2016-7836 Exploited EPSS 19%

    SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on th…

    Sky SKYSEA Client View
    KEV Oct 14, 2025
  • Critical 9.8
    CVE-2017-9435

    Dolibarr ERP and CRM SQLi

    Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injection in user/index.php (search_supervisor and search_statut parameters).

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Critical 9.8
    CVE-2017-9436

    TeamPass SQL injection in users.queries.php

    TeamPass before 2.1.27.4 is vulnerable to a SQL injection in users.queries.php.

    nilsteampassnet/teampass Packagist