Archive
June 2017
Vulnerabilities first published in this month (UTC), newest first.
1,033 results · Feed
-
Unscored —
Denial of Service was found in Horde_Image 2.x before 2.5.0 via a crafted URL to the "Null" image driver.
-
Unscored —
A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to 1.4.0p6, allowing an unauthentic…
-
Unscored —
In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriat…
-
Critical 9.1
An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Cam…
-
Critical 9.8CVE-2017-2805 EPSS 26%
An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 I…
-
High 8.8
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD C…
-
High 7.7
An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD…
-
High 8.1
An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Cam…
-
High 8.8
An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD C…
-
Unscored —
In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service (…
-
Unscored —
install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the database_usernam…
-
Unscored —CVE-2017-9129 Public exploit
The wav_open_read function in frontend/input.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to …
-
Unscored —CVE-2017-9130 Public exploit
The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cau…
-
Unscored —
GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section. A malformed section in a…
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF parsin…
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability …
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Tex…
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image…
-
Unscored —CVE-2017-3081 EPSS 16%
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal com…
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF proces…
-
Unscored —
Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz re…
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtim…
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising …
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating t…
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability …
-
Unscored —
Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that co…
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal …
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the bitmap rep…
-
Unscored —
Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. Successful exploit…
-
Unscored —CVE-2017-3082 EPSS 12%
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID …
-
Unscored —CVE-2017-3083 EPSS 16%
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SD…
-
Unscored —
Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AV…
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF imagin…
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The vulnerability …
-
Unscored —
Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character …
-
Unscored —CVE-2017-7668 EPSS 57%
The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which a…
-
Unscored —
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when s…
-
Unscored —CVE-2017-3167 EPSS 20%
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules o…
-
Unscored —CVE-2017-3169 EPSS 20%
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party mo…
-
Unscored —
In Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a non-administrative use…