Skip to content
OpenAdvisories

Archive

5 July 2017

Vulnerabilities first published on this day (UTC), newest first.

180 results · Feed

  • Unscored —

    XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…

  • Unscored —

    Winamp 5.666 Build 3516(x86) might allow attackers to execute arbitrary code or cause a denial of service via a crafted…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a c…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a c…

  • Unscored —

    IrfanView version 4.44 (32bit) allows attackers to execute arbitrary code or cause a denial of service via a crafted .r…

  • Unscored —

    XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…

  • Unscored —

    XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…

  • Unscored —

    XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…

  • Unscored —

    XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…

  • Unscored —

    XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…

  • Unscored —

    XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…

  • Unscored —

    IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other im…

  • Unscored —

    XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…

  • Unscored —

    XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…

  • Unscored —

    XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…

  • Unscored —

    XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…

  • Unscored —

    XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a c…

  • Unscored —

    XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…

  • Unscored —

    XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…

  • Unscored —

    IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allow…

  • Unscored —

    IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allow…

  • Unscored —

    IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allow…

  • Unscored —

    IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack trac…

  • Unscored —

    IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allow…

  • Unscored —

    IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starti…

  • Unscored —

    IBM Security Guardium 10.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A re…

  • Unscored —

    IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead t…

  • Unscored —

    IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could allow an authenticated attacker to access report data that should be…

  • Unscored —

    IBM Jazz Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to …

  • Unscored —

    IBM Security Guardium 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By …

  • Unscored —

    IBM Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed…

  • Unscored —

    IBM Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed…

  • Unscored —

    IBM Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit…

  • Unscored —

    IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. IBM X-Fo…

  • Unscored —

    IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropr…

  • Unscored —

    IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-cr…

  • Unscored —

    IBM Rational Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users…

  • Unscored —

    IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to…

  • Unscored —

    Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with…

  • Unscored —

    Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 failed to mark MCollective server private keys as sensitive…