Skip to content
OpenAdvisories

Archive

June 2017

Vulnerabilities first published in this month (UTC), newest first.

1,033 results · Feed

  • Unscored —
    CVE-2017-1297 Public exploit

    IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-ba…

  • Unscored —

    IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer o…

  • Unscored —

    IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by i…

  • Unscored —

    IBM API Connect 5.0.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remo…

  • Unscored —

    TeamSpeak Client 3.0.19 allows remote attackers to cause a denial of service (application crash) via the ᗪ Unicod…

  • High 8.8

    In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially craft…

  • High 8.8

    An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD C…

  • High 8.8

    In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially craft…

  • Unscored —

    tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from clien…

  • Unscored —

    OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker vi…

  • Unscored —

    OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv…

  • Unscored —

    OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory le…

  • Unscored —

    OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion cau…

  • Unscored —

    The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote a…

  • Unscored —

    The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote a…

  • Unscored —

    The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote a…

  • Unscored —

    The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote a…

  • Unscored —

    The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote a…

  • Unscored —

    The mp4ff_read_mdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote a…

  • Unscored —

    The mp4ff_parse_tag function in common/mp4ff/mp4meta.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote a…

  • Unscored —

    The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote a…

  • Unscored —

    The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote a…

  • Unscored —

    The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote a…

  • Unscored —

    The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote a…

  • Unscored —

    The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a …

  • Unscored —

    The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU B…

  • Unscored —

    The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binut…

  • Unscored —

    There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. A crafted input …

  • Unscored —

    The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is m…

  • Unscored —
    CVE-2017-6326 Public exploit EPSS 73%

    The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an …

  • Unscored —

    The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word fi…

  • Unscored —

    The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of servic…

  • Unscored —

    In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability.

  • Unscored —

    The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in …

  • Unscored —

    The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted lengt…

  • Unscored —
    CVE-2015-3315 Public exploit

    Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impa…

  • Unscored —

    The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of f…

  • Unscored —

    LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF im…

  • Unscored —

    fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking th…

  • Unscored —

    A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving…