CVEs published in June 2017
1,091 vulnerabilities, 142 critical, 5 exploited.
- phoenixbroadband poweragent sc3 bms firmwareA Use of Hard-Coded Password issue was discovered in Phoenix Broadband PowerAgent SC3 BMS, all...5.3 Medium
- epesiTelaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules...4.8 Medium
- bigtreecms bigtree cmsCSRF exists in BigTree CMS through 4.2.18 with the force parameter to /admin/pages/revisions.php ...8.8 High
- bigtreecms bigtree cmsUnrestricted File Upload exists in BigTree CMS through 4.2.18: if an attacker uploads an 'xxx.pht...9.8 Critical
- soffid iamUntrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to...9.8 Critical
- websitebakerWebsiteBaker v2.10.0 has a stored XSS vulnerability in /account/details.php.6.1 Medium
- websitebakerWebsiteBaker v2.10.0 has a SQL injection vulnerability in /account/details.php.9.8 Critical
- digium certified asterisk, open source +1 moreThe multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x...7.5 High
- asterisk certified asterisk, sangoma asterisk +1 moreA memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the RGMP dissector could crash. This was...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.6, the IPv6 dissector could crash. This was addressed in epan...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the openSAFETY dissector could crash or exhaust...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DICOM dissector has an infinite loop. This...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.6, the ROS dissector could crash with a NULL pointer dereference. This...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bluetooth L2CAP dissector could divide by...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the MSNIP dissector misuses a NULL pointer. This...7.5 High
- imagemagickIn ImageMagick 7.0.5-5, the ReadMPCImage function in mpc.c allows attackers to cause a denial of...6.5 Medium
- freedesktop poppler, debian linux +1 moreIn Poppler 0.54.0, a memory leak vulnerability was found in the function Object::initArray in...6.5 Medium
- imagemagickIn ImageMagick 7.0.5-5, the ReadPALMImage function in palm.c allows attackers to cause a denial...6.5 Medium
- freedesktop poppler, debian linux +1 moreIn Poppler 0.54.0, a memory leak vulnerability was found in the function gmalloc in gmem.cc,...6.5 Medium
- imagemagickIn ImageMagick 7.0.5-5, the ReadICONImage function in icon.c:452 allows attackers to cause a...6.5 Medium
- libtiff, canonical ubuntu linux, debian linux +2 moreIn LibTIFF 4.0.7, a memory leak vulnerability was found in the function...6.5 Medium
- libtiff, canonical ubuntu linux, debian linux +2 moreIn LibTIFF 4.0.7, a memory leak vulnerability was found in the function...6.5 Medium
- qemuMemory leak in the virtio_gpu_set_scanout function in hw/display/virtio-gpu.c in QEMU (aka Quick...5.5 Medium
- eucalyptusAtlassian Eucalyptus before 4.4.1, when in EDGE mode, allows remote authenticated users with...6.5 Medium
- flipbuilder flip pdfCross-site scripting (XSS) vulnerability in FlipBuilder Flip PDF allows remote attackers to...6.1 Medium
- paloaltonetworks pan-osPalo Alto Networks Panorama VM Appliance with PAN-OS before 6.0.1 might allow remote attackers to...7.8 High
- samsung syncthru 6Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote...9.8 Critical
- ceragon fibeair ip-10 firmwareCeragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu...9.8 Critical
- fortinet fortiosA Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker...6.1 Medium
- markdown on save improved project on save improvedThe Markdown on Save Improved plugin 2.5 for WordPress has a stored XSS vulnerability in the...6.1 Medium
- wp editor.md project editor.mdThe WP Editor.MD plugin 1.6 for WordPress has a stored XSS vulnerability in the content of a post.6.1 Medium
- call-cc chickenAn incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer...7.5 High
- epesiThe Agenda component in Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS)...5.4 Medium
- canonical ubuntu linux, debian linux, file\ \ +2 moreRace condition in the rmtree and remove_tree functions in the File-Path module before 2.13 for...5.9 Medium
- apache zookeeper, debian linux +1 moreUncontrolled Resource Consumption in Apache ZooKeeper7.5 High