Skip to content
OpenAdvisories

Archive

14 July 2017

Vulnerabilities first published on this day (UTC), newest first.

← June 2017 2017 / July /14 August 2017 →
  1. 12
  2. 212
  3. 315
  4. 430
  5. 5180
  6. 669
  7. 774
  8. 88
  9. 93
  10. 1033
  11. 1163
  12. 1239
  13. 1392
  14. 1472
  15. 15 
  16. 1613
  17. 1758
  18. 1828
  19. 1930
  20. 2087
  21. 2135
  22. 2213
  23. 2335
  24. 2437
  25. 2554
  26. 2636
  27. 2729
  28. 2830
  29. 2912
  30. 3014
  31. 3166
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2017-7673

    Apache OpenMeetings has Inadequate Encryption Strength

    Apache OpenMeetings 1.0.0 uses not very strong cryptographic storage, captcha is not used in registration and forget password dialogs and auth forms missing brute force protection.

    Apache Software Foundation Apache OpenMeetings org.apache.openmeetings:openmeetings-parent Maven
  • Critical 10.0
    CVE-2017-7664

    Apache OpenMeetings does not correctly validate uploaded XML documents

    Uploaded XML documents were not correctly validated in Apache OpenMeetings 3.1.0.

    Apache Software Foundation Apache OpenMeetings org.apache.openmeetings:openmeetings-parent Maven
  • Critical 10.0
    CVE-2017-2343

    SRX Series: Hardcoded credentials in Integrated UserFW feature.

    The Integrated User Firewall (UserFW) feature was introduced in Junos OS version 12.1X47-D10 on the Juniper SRX Series devices to provide simple integration of user profiles on top of the existing firewall polices. As part of an internal security review of th…

    Juniper Networks Junos OS Network devices
  • Critical 9.6
    CVE-2017-2336

    ScreenOS: XSS vulnerability in ScreenOS Firewall

    A reflected cross site scripting vulnerability in NetScreen WebUI of Juniper Networks Juniper NetScreen Firewall+VPN running ScreenOS allows a network based attacker to inject HTML/JavaScript content into the management session of other users including the ad…

    Juniper Networks ScreenOS Network devices
  • Critical 9.9
    CVE-2017-2349

    SRX Series: Command injection vulnerability in SRX IDP feature.

    A command injection vulnerability in the IDP feature of Juniper Networks Junos OS on SRX series devices potentially allows a user with login access to the device to execute shell commands and elevate privileges. Affected releases are Juniper Networks Junos OS…

    Juniper Networks Junos OS Network devices
  • Critical 9.8
    CVE-2017-2345

    Junos: snmpd denial of service upon receipt of crafted SNMP packet

    On Junos OS devices with SNMP enabled, a network based attacker with unfiltered access to the RE can cause the Junos OS snmpd daemon to crash and restart by sending a crafted SNMP packet. Repeated crashes of the snmpd daemon can result in a partial denial of …

    Juniper Networks Junos OS Network devices
  • Critical 9.8
    CVE-2017-10601

    Junos OS: Insufficient authentication for user login when a specific system configuration error occurs.

    A specific device configuration can result in a commit failure condition. When this occurs, a user is logged in without being prompted for a password while trying to login through console, ssh, ftp, telnet or su, etc., This issue relies upon a device configur…

    Juniper Networks Junos OS Network devices