Archive
June 2017
Vulnerabilities first published in this month (UTC), newest first.
1,033 results · Feed
-
Unscored —
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users…
-
Unscored —
Cross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention Endpoint (DLP Endpoint) 10.0…
-
Unscored —
Sitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter to the /Search-Result…
-
Unscored —
ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with weak entropy. Success…
-
High 8.1
An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure …
-
High 8.1
An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure …
-
Medium 6.5
An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b…
-
Unscored —
Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote a…
-
Unscored —
Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of …
-
Unscored —
In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Mo…
-
Unscored —
IBM RELM 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Jav…
-
Unscored —
IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such…
-
Unscored —
IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view file…
-
Unscored —
IBM Sterling File Gateway does not properly restrict user requests based on permission level. This allows for users to …
-
Unscored —
IdeaBlade Breeze Breeze.Server.NET before 1.6.5 allows remote attackers to execute arbitrary code, related to use of Ty…
-
Unscored —
In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a malloc operation, which…
-
Unscored —CVE-2017-0176 EPSS 46%
A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 t…
-
Unscored —CVE-2012-6706 EPSS 10%
A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engi…
-
Unscored —CVE-2017-3629 Public exploit
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions …
-
Unscored —CVE-2017-3631 Public exploit
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported versi…
-
Unscored —CVE-2017-3630 Public exploit
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions …
-
Unscored —
An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig function of "plugin/c…
-
Unscored —CVE-2016-7508 Public exploit
Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL c…
-
Unscored —
In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote…
-
Unscored —
In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may levera…
-
Unscored —
EMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege escalation vulnerability t…
-
Unscored —
Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates…
-
Unscored —
Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior to version 5.0, Samsun…
-
Unscored —
JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) …
-
Critical 9.8
Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12. Knowledge of these credential…
-
Unscored —CVE-2017-7922 Public exploit
An Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges for SNMP community strin…
-
Unscored —CVE-2017-7918 Public exploit
An Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has used SNMP configuratio…
-
Unscored —
A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The application fails to proper…
-
Unscored —
A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. A cross-site scripting vuln…
-
Unscored —
An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some files are exposed wit…
-
Unscored —
A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The client does not properl…
-
High 8.8
An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44. A special…
-
Unscored —
IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a denial of service to the MQXR channel when tr…
-
Unscored —
IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Stora…
-
Unscored —
Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request. Exploitation requires authen…