Archive
July 2017
Vulnerabilities first published in this month (UTC), newest first.
1,269 results · Feed
-
Unscored —
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…
-
Unscored —
IrfanView version 4.44 (32bit) might allow attackers to cause a denial of service or possibly have unspecified other im…
-
Unscored —
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…
-
Unscored —
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…
-
Unscored —
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…
-
Unscored —
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…
-
Unscored —
XnView Classic for Windows Version 2.40 allows attackers to execute arbitrary code or cause a denial of service via a c…
-
Unscored —
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…
-
Unscored —
XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified…
-
Unscored —
IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allow…
-
Unscored —
IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allow…
-
Unscored —
IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allow…
-
Unscored —
IBM Jazz Foundation could allow an authenticated attacker to obtain sensitive information from error message stack trac…
-
Unscored —
IBM Jazz Foundation Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allow…
-
Unscored —
IBM WebSphere Message Broker could allow a local user with specialized access to prevent the message broker from starti…
-
Unscored —
IBM Security Guardium 10.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A re…
-
Unscored —
IBM Security Guardium 10.0 does not prove or insufficiently proves that the actors identity is correct which can lead t…
-
Unscored —
IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could allow an authenticated attacker to access report data that should be…
-
Unscored —
IBM Jazz Reporting Service (JRS) 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to …
-
Unscored —
IBM Security Guardium 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By …
-
Unscored —
IBM Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed…
-
Unscored —
IBM Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed…
-
Unscored —
IBM Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbit…
-
Unscored —
IBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by a local user. IBM X-Fo…
-
Unscored —
IBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive information due to inappropr…
-
Unscored —
IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker could send specially-cr…
-
Unscored —
IBM Rational Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users…
-
Unscored —
IBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to…
-
Unscored —
Versions of Puppet prior to 4.10.1 will deserialize data off the wire (from the agent to the server, in this case) with…
-
Unscored —
Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 failed to mark MCollective server private keys as sensitive…
-
Unscored —
IBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the query of the request. …
-
Unscored —
IBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…
-
Unscored —
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…
-
Unscored —
IBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical resource or functionality a…
-
Unscored —
IBM Security Guardium 10.0 and 10.1 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL …
-
Unscored —
The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of servic…
-
Unscored —
In ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c allows remote attackers t…
-
Unscored —
Xen through 4.8.x does not validate the port numbers of polled event channel ports, which allows guest OS users to caus…
-
Unscored —
The shadow-paging feature in Xen through 4.8.x mismanages page references and consequently introduces a race condition,…
-
Unscored —
The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS use…