CVEs published in June 2017
1,091 vulnerabilities, 142 critical, 5 exploited.
- puppet mcollective, mcollective-sshkey-security +1 more The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier... 6.5 Medium
- puppet mcollective, mcollective, puppet, puppet enterprise +1 more Versions of MCollective prior to 2.10.4 deserialized YAML from agents without calling safe_load,... 9.0 Critical
- elastic kibana, kibana x-pack security +1 more In Kibana X-Pack security versions prior to 5.4.3 if a Kibana user opens a crafted Kibana URL the... 6.5 Medium
- google android The lockscreen on Elephone P9000 devices (running Android 6.0) allows physically proximate... 6.8 Medium
- videolan vlc media player avcodec 2.2.x, as used in VideoLAN VLC media player 2.2.7-x before 2017-06-29, allows out-of... 9.8 Critical
- antiy antivirus engine Antiy Antivirus Engine 5.0.0.06281654 allows local users to cause a denial of service (BSOD) via... 5.5 Medium
- qnap systems inc. video station Multiple cross-site scripting (XSS) vulnerabilities in Synology Video Station 1.2 before 1.2-0455... 5.4 Medium
- synology audio station Cross-site scripting (XSS) vulnerabilities in Synology Audio Station 5.1 before 5.1-2550 and 5.4... 5.4 Medium
- synology note station Multiple cross-site scripting (XSS) vulnerabilities in Synology Note Station 1.1-0212 and earlier... 5.4 Medium
- qnap systems inc. photo station Multiple cross-site scripting (XSS) vulnerabilities in Synology Photo Station 6.0 before 6.0-2638... 5.4 Medium
- xoev osci transport library An XML External Entity (XXE) issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library... 9.8 Critical
- xoev osci transport library Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java)... 6.5 Medium
- xoev osci transport library A Padding Oracle exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and... 5.9 Medium
- ge multilin sr 369 motor protection relay firmware, multilin sr 469 motor protection relay firmware, multilin sr 489 generator protection relay firmware +7 more +9 more A Weak Cryptography for Passwords issue was discovered in General Electric (GE) Multilin SR 750... 9.8 Critical
- rockwellautomation 1763-l16awa series a, 1763-l16awa series b, 1763-l16bbb series a +17 more +19 more A Weak Password Requirements issue was discovered in Rockwell Automation Allen-Bradley MicroLogix... 9.8 Critical
- rockwellautomation 1763-l16awa series a, 1763-l16awa series b, 1763-l16bbb series a +17 more +19 more A "Reusing a Nonce, Key Pair in Encryption" issue was discovered in Rockwell Automation Allen... 9.8 Critical
- rockwellautomation 1763-l16awa series a, 1763-l16awa series b, 1763-l16bbb series a +17 more +19 more A Predictable Value Range from Previous Values issue was discovered in Rockwell Automation Allen... 8.6 High
- rockwellautomation 1763-l16awa series a, 1763-l16awa series b, 1763-l16bbb series a +17 more +19 more An Information Exposure issue was discovered in Rockwell Automation Allen-Bradley MicroLogix 1100... 9.8 Critical
- rockwellautomation 1763-l16awa series a, 1763-l16awa series b, 1763-l16bbb series a +17 more +19 more An Improper Restriction of Excessive Authentication Attempts issue was discovered in Rockwell... 9.8 Critical
- sierra wireless airlink raven xe firmware, airlink raven xt firmware +1 more An Insufficiently Protected Credentials issue was discovered in Sierra Wireless AirLink Raven XE,... 7.5 High
- sierra wireless airlink raven xe firmware, airlink raven xt firmware +1 more An Improper Authorization issue was discovered in Sierra Wireless AirLink Raven XE, all versions... 9.8 Critical
- sierra wireless airlink raven xe firmware, airlink raven xt firmware +1 more A Cross-Site Request Forgery issue was discovered in Sierra Wireless AirLink Raven XE, all... 8.8 High
- marel a320 firmware, a325 firmware, a371 firmware +19 more +21 more An Unrestricted Upload issue was discovered in Marel Food Processing Systems M3000 terminal... 9.8 Critical
- belden hirschmann gecko lite managed switch firmware An Information Exposure issue was discovered in Belden Hirschmann GECKO Lite Managed switch,... 5.3 Medium
- belden hirschmann gecko lite managed switch firmware A Cross-Site Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch,... 7.1 High
- belden hirschmann gecko lite managed switch firmware A Server-Side Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch... 6.5 Medium
- schneider electric modicon modbus protocol, schneider-electric modbus firmware +1 more Schneider Electric Modicon Modbus Protocol Authentication Bypass by Capture-replay 9.8 Critical
- schneider-electric modbus firmware A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus... 5.3 Medium
- schneider electric modicon m221, modicon m241, modicon m251 +3 more +5 more Schneider Electric Modicon PLCs Predictable Value Range from Previous Values 6.5 Medium
- schneider-electric modicon m241 firmware, modicon m251 firmware +1 more An Insufficiently Protected Credentials issue was discovered in Schneider Electric Modicon PLCs... 9.8 Critical
- schneider-electric modicon m241 firmware, modicon m251 firmware +1 more A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs... 9.1 Critical
- bd kla journal service, performa +1 more A hard-coded password issue was discovered in Becton, Dickinson and Company (BD) PerformA,... 9.8 Critical
- bbraun station firmware An open redirect issue was discovered in B. Braun Medical SpaceCom module, which is integrated... 6.1 Medium
- schneider-electric bmxnoc0401 firmware, bmxnoe0100 firmware, bmxnoe0110 firmware +12 more +14 more A Resource Exhaustion issue was discovered in Schneider Electric Modicon M340 PLC BMXNOC0401,... 7.5 High
- marel a320 firmware, a325 firmware, a371 firmware +19 more +21 more A Hard-Coded Passwords issue was discovered in Marel Food Processing Systems M3000 terminal... 9.8 Critical
- libsass In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in... 7.5 High
- invisible-island ncurses In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input... 9.8 Critical
- invisible-island ncurses In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input... 9.8 Critical
- mpg123 In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in... 7.5 High
-
rxvt-unicodeMageia Updated rxvt-unicode packages fix security vulnerability No score - piwigo SQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote... 9.8 Critical
- piwigo Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers... 8.8 High
- piwigo Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers... 8.8 High
- piwigo Piwigo through 2.9.1 allows remote attackers to obtain sensitive information about the... 7.5 High
- piwigo Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers... 8.8 High
- dell emc vasa provider virtual appliance EMC VASA Provider Virtual Appliance versions 8.3.x and prior has an unauthenticated remote code... 9.8 Critical
- foscam c1 indoor hd camera firmware, indoor ip camera c1 series +1 more In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2... 7.5 High
- foscam c1 indoor hd camera firmware, indoor ip camera c1 series +1 more In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2... 8.8 High
- foscam c1 indoor hd camera firmware, indoor ip camera c1 series +1 more In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2... 8.8 High
- foscam c1 indoor hd camera firmware, indoor ip camera c1 series +1 more In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2... 8.8 High
- Show olderLoading…