Archive
6 July 2017
Vulnerabilities first published on this day (UTC), newest first.
69 results · Feed
-
Unscored —
A elevation of privilege vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: …
-
Unscored —
A remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A…
-
Unscored —
A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.…
-
Unscored —
A denial of service vulnerability in the Android libraries. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: …
-
Unscored —
A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, …
-
Unscored —
A elevation of privilege vulnerability in the MediaTek networking driver. Product: Android. Versions: Android kernel. A…
-
Unscored —
A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execut…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execut…
-
Critical 9.8
Deserialization of Untrusted Data in Jython
Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.
-
Unscored —
Incorrect computation for P-256 curves in crypto/elliptic
A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively ext…
-
Unscored —
A potential Buffer Overflow Vulnerability (from a BB Code handling issue) has been identified in TeamSpeak Server versi…
-
Unscored —
The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows…
-
Unscored —
In FineCMS before 2017-07-06, application/lib/ajax/get_image_data.php has SSRF, related to requests for non-image files…
-
Unscored —
In FineCMS before 2017-07-06, application\core\controller\config.php allows XSS in the (1) key_name, (2) key_value, and…
-
Unscored —
When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock(…
-
Unscored —
IBM WebSphere MQ 9.0.2 could allow an authenticated user to potentially cause a denial of service by saving an incorrec…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Lutim before 0.8 might allow remote attackers to inject arbitrary web scrip…
-
Unscored —
Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed auth…
-
Unscored —
Cross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary …
-
Unscored —
In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the contex…
-
Unscored —
The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and…
-
Unscored —
A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 thr…
-
Unscored —
A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote…
-
Unscored —
A vulnerability in the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attac…
-
Unscored —
A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker …
-
Unscored —
A vulnerability in the symbolic link (symlink) creation functionality of the AutoVNF tool for the Cisco Ultra Services …
-
Unscored —
A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, …
-
Unscored —
A vulnerability in the Ultra Automation Service (UAS) of the Cisco Ultra Services Framework could allow an unauthentica…