Archive

20 July 2017

Vulnerabilities first published on this day (UTC), newest first.

← June 2017 2017 / July /20 August 2017 →

All Critical High Medium Low Exploited only Public exploit

87 results · Feed

Unscored —

CVE-2017-11475

GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php.

glpi Ubuntu

Jul 20, 2017
Unscored —

CVE-2017-11474

GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via …

glpi Ubuntu

Jul 20, 2017
Critical 9.8

CVE-2017-6316 Exploited Public exploit EPSS 73%

Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as …

Jul 20, 2017
KEV Mar 25, 2022
Unscored —

CVE-2017-10676

On D-Link DIR-600M devices before C1_v3.05ENB01_beta_20170306, XSS was found in the form2userconfig.cgi username parame…

Jul 20, 2017
Critical 9.8

CVE-2017-11467 Public exploit EPSS 73%

OrientDB vulnerable to Improper Privilage Management leading to arbitrary command injection

OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackers to execute arbitrary OS commands via a crafted request.

com.orientechnologies:orientdb-core Maven

Jul 20, 2017
Unscored —

CVE-2017-11466

Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows rem…

Jul 20, 2017
Unscored —

CVE-2017-9765 EPSS 42%

Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and o…

gsoap gsoap r-other-x4r Debian Ubuntu

Jul 20, 2017