Skip to content
OpenAdvisories

Archive

2 July 2017

Vulnerabilities first published on this day (UTC), newest first.

← June 2017 2017 / July /2 August 2017 →
  1. 12
  2. 212
  3. 315
  4. 430
  5. 5180
  6. 669
  7. 774
  8. 88
  9. 93
  10. 1033
  11. 1163
  12. 1239
  13. 1392
  14. 1472
  15. 15 
  16. 1613
  17. 1758
  18. 1828
  19. 1930
  20. 2087
  21. 2135
  22. 2213
  23. 2335
  24. 2437
  25. 2554
  26. 2636
  27. 2729
  28. 2830
  29. 2912
  30. 3014
  31. 3166
All Critical High Medium Low Exploited only Public exploit

12 results · Feed

  • Unscored —
    CVE-2017-10794

    When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders…

    graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-10796

    On TP-Link NC250 devices with firmware through 1.2.1 build 170515, anyone can view video and audio without authenticati…

  • Unscored —
    CVE-2017-8797

    The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4…

    linux-raspi2 linux-hwe linux-riscv linux-gcp Debian Ubuntu
  • Unscored —
    CVE-2017-8894

    AeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates. An attacker can hijack an update via man-in…

  • Unscored —
    CVE-2017-8893

    AeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied is taken directly fro…

  • Unscored —
    CVE-2017-0377

    Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's famil…

  • Unscored —
    CVE-2017-10706

    When Antiy Antivirus Engine before 5.0.0.05171547 scans a special ZIP archive, it crashes with a stack-based buffer ove…

  • Medium 6.1
    CVE-2017-10795

    Subrion Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

    intelliants/subrion Packagist
  • Unscored —
    RUSTSEC-2017-0008

    `serial` crate is unmaintained

    The [`serial`](https://crates.io/crates/serial) crate is no longer maintained. Last release was on 2017-07-02. ## Possible alternatives Consider using an alternative, for instance the blocking librarys: - [serial2](https://crates.io/crates/serial2) - [serialp…

    serial crates.io
  • Unscored —
    CVE-2017-10790

    The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when readi…

    libtasn1-6 libtasn1-6 libtasn1 Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-10792

    There is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU PSPP before 0.11.0. For e…

    pspp pspp Debian Ubuntu
  • Unscored —
    CVE-2017-10791

    There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0.11.0. For example, a …

    pspp pspp Debian Ubuntu