Archive

June 2017

Vulnerabilities first published in this month (UTC), newest first.

← May 2017 2017 / June July 2017 →

All Critical High Medium Low Exploited only Public exploit

1,033 results · Feed

Unscored —

CVE-2016-7818

Untrusted search path vulnerability in Installers for Specification check program (social insurance) Ver. 9.00 and earl…

Japan Pension Service Intstaller for TODOKESHO print program Intstaller for TODOKESHO creation program Intstaller for Specification check program(social insurance)

Jun 9, 2017
Unscored —

CVE-2016-7806

I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via …

I-O DATA DEVICE WFS-SR01

Jun 9, 2017
Unscored —

CVE-2016-7832

Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu De…

Cybozu Cybozu Dezie

Jun 9, 2017
Unscored —

CVE-2016-7838

Untrusted search path vulnerability in WinSparkle versions prior to 0.5.3 allows remote attackers to execute arbitrary …

WinSparkle WinSparkle

Jun 9, 2017
Unscored —

CVE-2016-7808

Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary we…

Corega CG-WLBARGNL CG-WLBARGMH

Jun 9, 2017
Unscored —

CVE-2016-7833

Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu De…

Cybozu Cybozu Dezie

Jun 9, 2017
Unscored —

CVE-2016-7820

Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 an…

I-O DATA DEVICE TS-WRLA TS-WRLP

Jun 9, 2017
Unscored —

CVE-2016-7825

Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authentic…

BUFFALO WNC01WH

Jun 9, 2017
Unscored —

CVE-2016-7803

SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitr…

Cybozu Cybozu Garoon

Jun 9, 2017
Critical 9.8

CVE-2016-7836 Exploited EPSS 19%

SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on th…

Sky SKYSEA Client View

Jun 9, 2017
KEV Oct 14, 2025
Unscored —

CVE-2016-7814

I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow rem…

I-O DATA DEVICE TS-WRLA TS-WRLP

Jun 9, 2017
Unscored —

CVE-2016-7810

Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administra…

Corega CG-WLR300NX

Jun 9, 2017
Unscored —

CVE-2016-7822

Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier al…

BUFFALO WNC01WH

Jun 9, 2017
Unscored —

CVE-2016-7830

Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51…

Sony PCS-XG100 PCS-XG100C PCS-XG77S

Jun 9, 2017
Unscored —

CVE-2016-7816

The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allo…

Cybozu kintone mobile for Android Android

Jun 9, 2017
Unscored —

CVE-2016-7809

Cross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote atta…

Corega CG-WLR300NX

Jun 9, 2017
Unscored —

CVE-2016-4906

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web scri…

Cybozu Cybozu Garoon

Jun 9, 2017
Unscored —

CVE-2016-4907

Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors.

Cybozu Cybozu Garoon

Jun 9, 2017
Unscored —

CVE-2016-4908

Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete anot…

Cybozu Cybozu Garoon

Jun 9, 2017
Unscored —

CVE-2016-4909

Cross-site request forgery (CSRF) vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to hijack the a…

Cybozu Cybozu Garoon

Jun 9, 2017
Unscored —

CVE-2016-4902

Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software (for …

Japan Agency for Local Authority Information Systems The Public Certification Service for Individuals "The JPKI user's software" Windows

Jun 9, 2017
Unscored —

CVE-2016-4910

Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to delete other operati…

Cybozu Cybozu Garoon

Jun 9, 2017
Unscored —

CVE-2017-2214

Untrusted search path vulnerability in AppCheck and AppCheck Pro prior to version 2.0.1.15 allows an attacker to execut…

JIRANSOFT JAPAN AppCheck AppCheck Pro

Jun 9, 2017
Unscored —

CVE-2017-2206

Untrusted search path vulnerability in the installer of SaAT Netizen ver.1.2.10.510 and earlier allows an attacker to g…

NetMove The installer of SaAT Netizen

Jun 9, 2017
Unscored —

CVE-2017-2182

Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain …

INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Hands-on Vulnerability Learning Tool "AppGoat" for Web Application

Jun 9, 2017
Unscored —

CVE-2017-2176

Untrusted search path vulnerability in screensaver installers (jasdf_01.exe, jasdf_02.exe, jasdf_03.exe, jasdf_04.exe, …

JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE jasdf_01.exe jasdf_03.exe jasdf_05.exe

Jun 9, 2017
Unscored —

CVE-2017-2195

SQL injection vulnerability in the Multi Feed Reader prior to version 2.2.4 allows authenticated attackers to execute a…

Eric Teubert Multi Feed Reader

Jun 9, 2017
Unscored —

CVE-2017-2179

Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allows remote code execution via …

INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Hands-on Vulnerability Learning Tool "AppGoat" for Web Application

Jun 9, 2017
Unscored —

CVE-2017-2192

Untrusted search path vulnerability in RW-5100 tool to verify execution environment for Windows 7 version 1.1.0.0 and R…

Sharp RW-5100 tool to verify execution environment for Windows 7 RW-5100 tool to verify execution environment for Windows 8.1 Windows

Jun 9, 2017
Unscored —

CVE-2017-2181

Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain …

INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Hands-on Vulnerability Learning Tool "AppGoat" for Web Application

Jun 9, 2017
Unscored —

CVE-2017-2211

Untrusted search path vulnerability in PatchJGD (Hyoko) (PatchJGDh101.EXE) ver. 1.0.1 allows an attacker to gain privil…

Geospatial Information Authority of Japan (GSI) PatchJGD (Hyoko) (PatchJGDh101.EXE)

Jun 9, 2017
Unscored —

CVE-2017-2190

Untrusted search path vulnerability in RW-4040 tool to verify execution environment for Windows 7 version 1.2.0.0 allow…

Sharp RW-4040 tool to verify execution environment for Windows 7 Windows

Jun 9, 2017
Unscored —

CVE-2017-2209

Untrusted search path vulnerability in the installer of Houkokusyo Sakusei Shien Tool ver3.0.2 (For the first installat…

Ministry of the Environment Installer of Houkokusyo Sakusei Shien Tool

Jun 9, 2017
Unscored —

CVE-2017-2210

Untrusted search path vulnerability in PatchJGD (PatchJGD101.EXE) ver. 1.0.1 allows an attacker to gain privileges via …

Geospatial Information Authority of Japan (GSI) PatchJGD (PatchJGD101.EXE)

Jun 9, 2017
Unscored —

CVE-2017-2207

Untrusted search path vulnerability in the installer of SaAT Personal ver.1.0.10.272 and earlier allows an attacker to …

NetMove The installer of SaAT Personal

Jun 9, 2017
Unscored —

CVE-2017-2212

Untrusted search path vulnerability in TKY2JGD (TKY2JGD1379.EXE) ver. 1.3.79 allows an attacker to gain privileges via …

Geospatial Information Authority of Japan (GSI) TKY2JGD (TKY2JGD1379.EXE)

Jun 9, 2017
Unscored —

CVE-2017-2219

Untrusted search path vulnerability in the [Simeji for Windows] installer (simeji.exe) allows an attacker to gain privi…

Jun 9, 2017
Unscored —

CVE-2017-2165

GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain s…

Japan Total System GroupSession

Jun 9, 2017
Unscored —

CVE-2017-2177

Untrusted search path vulnerability in Installer of Shogyo Touki Denshi Ninsho Software Ver 1.7 and earlier allows an a…

Ministry of Justice Installer of Shogyo Touki Denshi Ninsho Software

Jun 9, 2017
Unscored —

CVE-2017-2180

Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain …

INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Hands-on Vulnerability Learning Tool "AppGoat" for Web Application

Jun 9, 2017