Archive
June 2017
Vulnerabilities first published in this month (UTC), newest first.
1,033 results · Feed
-
Unscored —
A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remot…
-
Unscored —
A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an aff…
-
Unscored —
A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log …
-
Unscored —
Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticate…
-
Unscored —
A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could …
-
Unscored —
A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, r…
-
Unscored —
A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local…
-
Unscored —
A vulnerability in the file system of Cisco Elastic Services Controllers could allow an authenticated, local attacker t…
-
Unscored —
A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to…
-
Unscored —
A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an aff…
-
Unscored —
A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, rem…
-
Unscored —
A vulnerability in the esc_listener.py script of Cisco Elastic Services Controllers could allow an authenticated, remot…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthentic…
-
Unscored —
A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with ac…
-
Unscored —
A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user infor…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) and Cisco Content Securit…
-
Unscored —
A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with acc…
-
Unscored —
A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to…
-
Unscored —
A vulnerability in the web interface of Cisco Elastic Services Controllers could allow an authenticated, remote attacke…
-
Unscored —
A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unaut…
-
Unscored —
A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco Star…
-
Unscored —
A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (S…
-
Unscored —
A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to…
-
Unscored —
A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow a…
-
Unscored —
A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attack…
-
Unscored —
A vulnerability in the ConfD server in Cisco Ultra Services Platform could allow an authenticated, local attacker to vi…
-
Unscored —
A vulnerability in the Virtual Network Function Manager's (VNFM) logging function of Cisco Ultra Services Platform coul…
-
Unscored —
A vulnerability in Session Initiation Protocol (SIP) call handling of Cisco IP Phone 8800 Series devices could allow an…
-
Unscored —
A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Se…
-
Unscored —
A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with ac…
-
Unscored —
An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.60, 1.7.x versions prior to 1.7.41, …
-
Unscored —
Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM com…
-
Medium 6.1
Mail Gem CRLF Injection vulnerability
The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.
-
Unscored —
IBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that when opened could caus…
-
Unscored —
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows u…
-
Unscored —
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows u…
-
Unscored —
IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote attacker could inject ma…
-
Medium 6.1
Cross-site Scripting in Apache NiFi
In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.
-
High 7.5
Origin Validation Error in Apache NiFi
Apache NiFi before 0.7.4 and 1.x before 1.3.0 need to establish the response header telling browsers to only allow framing with the same origin.
-
Unscored —
In libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be exploited to cause an out-…