Skip to content
OpenAdvisories

Archive

27 July 2017

Vulnerabilities first published on this day (UTC), newest first.

← June 2017 2017 / July /27 August 2017 →
  1. 12
  2. 212
  3. 315
  4. 430
  5. 5180
  6. 669
  7. 774
  8. 88
  9. 93
  10. 1033
  11. 1163
  12. 1239
  13. 1392
  14. 1472
  15. 15 
  16. 1613
  17. 1758
  18. 1828
  19. 1930
  20. 2087
  21. 2135
  22. 2213
  23. 2335
  24. 2437
  25. 2554
  26. 2636
  27. 2729
  28. 2830
  29. 2912
  30. 3014
  31. 3166
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2016-0736 Public exploit EPSS 49%

    In Apache HTTP Server versions 2.4.0 to 2.4.23, mod_session_crypto was encrypting its data/cookie using the configured …

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu
  • Unscored —
    CVE-2016-2161 EPSS 21%

    In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and e…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu
  • Unscored —
    CVE-2016-8743 EPSS 13%

    Apache HTTP Server, in all releases prior to 2.2.32 and 2.4.25, was liberal in the whitespace accepted from requests an…

    Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Ubuntu
  • Unscored —
    CVE-2016-10399

    Sendio versions before 8.2.1 were affected by a Local File Inclusion vulnerability that allowed an unauthenticated, rem…

  • Unscored —
    CVE-2017-8870 Public exploit EPSS 14%

    Buffer overflow in AudioCoder 0.8.46 allows remote attackers to execute arbitrary code via a crafted .m3u file.

  • Unscored —
    CVE-2016-10402 EPSS 10%

    Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section heade…

  • Unscored —
    CVE-2017-8869 Public exploit EPSS 16%

    Buffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arbitrary code via a crafted .m3u file.

  • Unscored —
    CVE-2017-11665

    The ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP servers to cause a deni…

    ffmpeg ffmpeg ffmpeg Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-11679

    Cross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin.php in an a=config actio…

  • Unscored —
    CVE-2017-11687

    Multiple Persistent cross-site scripting (XSS) vulnerabilities in Event log parsing and Display functions in Zoho Manag…

  • Unscored —
    CVE-2017-11685

    Multiple Reflective cross-site scripting (XSS) vulnerabilities in search and display of event data in Zoho ManageEngine…

  • Unscored —
    CVE-2017-11673

    Reporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of service (application …

  • Unscored —
    CVE-2017-11682

    Stored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject arbitrary web script o…

  • Unscored —
    CVE-2017-11678

    SQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2017-11686

    Zoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an authenticated user's password v…

  • Unscored —
    CVE-2017-11674

    Reporter.exe in Acunetix 8 allows remote attackers to cause a denial of service (application crash) via a malformed PRE…

  • Unscored —
    CVE-2017-11691

    Cross-site scripting (XSS) vulnerability in auth_profile.php in Cacti 1.1.13 allows remote attackers to inject arbitrar…

    cacti Debian
  • Unscored —
    CVE-2017-11677

    Cross-site scripting (XSS) vulnerability in Hashtopus 1.5g allows remote attackers to inject arbitrary web script or HT…

  • Unscored —
    CVE-2017-11681

    Incorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to execute actions that s…

  • Unscored —
    CVE-2017-11680

    Cross-Site Request Forgery (CSRF) exists in Hashtopussy 0.4.0, allowing an admin password change via users.php.

  • High 8.8
    CVE-2017-11675

    Authenticated RCE in Zen Cart 1.5.5e

    The traverseStrictSanitize function in admin_dir/includes/classes/AdminRequestSanitizer.php in ZenCart 1.5.5e mishandles key strings, which allows remote authenticated users to execute arbitrary PHP code by placing that code into an invalid array index of the…

    zencart/zencart Packagist
  • Unscored —
    CVE-2017-11684

    There is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav 12.1 that will lead t…

    ffmpeg libav Debian Ubuntu
  • Unscored —
    CVE-2017-9259 Public exploit

    The TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote att…

    soundtouch soundtouch Debian Ubuntu
  • Unscored —
    CVE-2017-9260 Public exploit

    The TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9.2 allows remote attac…

    soundtouch soundtouch Debian Ubuntu
  • Unscored —
    CVE-2017-9258 Public exploit

    The TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2 allows remote attackers t…

    soundtouch soundtouch Debian Ubuntu
  • Unscored —
    CVE-2017-9614 Public exploit

    The fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2017-9545

    The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a denial of service (bu…

    mpg123 mpg123 mpg123 Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-9412 Public exploit

    The unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers to cause a denial of se…

    lame lame lame Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-11683

    There is a reachable assertion in the Internal::TiffReader::visitDirectory function in tiffvisitor.cpp of Exiv2 0.26 th…

    exiv2 exiv2 Debian Ubuntu