CVEs published in June 2017
1,091 vulnerabilities, 142 critical, 5 exploited.
- irssi, debian linux +1 moreIn Irssi before 1.0.3, when receiving a DCC message without source nick/host, it attempts to...7.5 High
- samba, debian linux, redhat enterprise linux desktop +5 more +7 moresmbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability ...6.5 Medium
- freedesktop popplerpoppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting...5.5 Medium
- apache tomcatImproper Handling of Exceptional Conditions in Apache Tomcat7.5 High
- bigtreecms bigtree cmsBigTree CMS through 4.2.18 has CSRF related to the core\admin\modules\users\profile\update.php...8.8 High
- bigtreecms bigtree cms** DISPUTED ** BigTree CMS through 4.2.18 allows remote authenticated users to conduct SQL...8.8 High
- bigtreecms bigtree cms** DISPUTED ** BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary...8.8 High
- bigtreecms bigtree cms** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in BigTree CMS through 4.2.18...5.4 Medium
- sunnythemes spiffy calendarCross site scripting (XSS) vulnerability in the Spiffy Calendar plugin before 3.3.0 for WordPress...6.1 Medium
- virustotal yaralibyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of...7.5 High
- openbravo erpOpenbravo Business Suite 3.0 is affected by SQL injection. This vulnerability could allow remote...8.8 High
- teampassTeamPass SQL injection in users.queries.php9.8 Critical
- dolibarrDolibarr ERP and CRM SQLi9.8 Critical
- cryptopp crypto\+\+Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate...5.3 Medium
- peplink 1350hw2 firmware, 2500 firmware, 380hw6 firmware +3 more +5 moreArbitrary file deletion exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with...8.1 High
- peplink 1350hw2 firmware, 2500 firmware, 380hw6 firmware +3 more +5 moreDebug information disclosure exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices...5.3 Medium
- peplink 1350hw2 firmware, 2500 firmware, 380hw6 firmware +3 more +5 moreXSS via orig_url exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with...6.1 Medium
- peplink 1350hw2 firmware, 2500 firmware, 380hw6 firmware +3 more +5 moreXSS via syncid exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware...6.1 Medium
- peplink 1350hw2 firmware, 2500 firmware, 380hw6 firmware +3 more +5 moreCleartext password storage exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices...9.8 Critical
- peplink 1350hw2 firmware, 2500 firmware, 380hw6 firmware +3 more +5 moreCSRF exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware before fw...8.8 High
- peplink 1350hw2 firmware, 2500 firmware, 380hw6 firmware +3 more +5 moreSQL injection exists on Peplink Balance 305, 380, 580, 710, 1350, and 2500 devices with firmware...9.8 Critical
- elastic x-pack, x-pack security +1 moreElastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document...4.3 Medium
- elastic kibanaStarting in version 5.3.0, Kibana had a cross-site scripting (XSS) vulnerability in the Discover...6.1 Medium
- elastic kibanaKibana version 5.4.0 was affected by a Cross Site Scripting (XSS) bug in the Time Series Visual...6.1 Medium
- elastic x-pack, x-pack security +1 moreElastic X-Pack Security versions 5.0.0 to 5.4.0 contain a privilege escalation bug in the run_as...8.8 High
- dnstracer project dnstracerStack-based buffer overflow in dnstracer through 1.9 allows attackers to cause a denial of...9.8 Critical
- libstaroffice project libstarofficeDocument Liberation Project libstaroffice before 2017-04-07 has an out-of-bounds write caused by...9.8 Critical
- grpcGoogle gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow...9.8 Critical
- imagemagickIn ImageMagick 7.0.5-5, a memory leak was found in the function ReadPSDChannel in coders/psd.c,...6.5 Medium
- imagemagickIn ImageMagick 7.0.5-5, a memory leak was found in the function ReadPDBImage in coders/pdb.c,...6.5 Medium
- sudo project sudoTodd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an input validation (embedded...8.2 High
- bigtreecms bigtree cmsA directory traversal vulnerability exists in core\admin\ajax\developer\extensions\file-browser...7.5 High
- bigtreecms bigtree cmsSQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to...8.8 High
- rarlab rarDirectory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks,...5.5 Medium
- libmwaw project libmwawDocument Liberation Project libmwaw before 2017-04-08 has an out-of-bounds write caused by a heap...9.8 Critical
- broadcom bcm43xx wi-fi chipset firmwareBroadcom BCM43xx Wi-Fi chips allow remote attackers to execute arbitrary code via unspecified...9.8 Critical
- odooDirectory traversal vulnerability in tools.file_open in Odoo 8.0, 9.0, and 10.0 allows remote...6.5 Medium
- jamroomCross Site Scripting (XSS) exists in Jamroom before 4.2.7 via the Status Update field.6.1 Medium
- lenovo power management driver, power management +1 moreIn the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's...3.3 Low
- lenovo active protection systemIn Lenovo Active Protection System before 1.82.0.14, an attacker with local privileges could send...5.5 Medium
- lenovo service bridgeIn Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the...7.5 High
- lenovo service bridgeIn Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send...7.5 High
- lenovo service bridgeA cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be...8.8 High
- lenovo service bridgeIn Lenovo Service Bridge before version 4, a user with local privileges on a system could execute...7.8 High
- apache hadoopApache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validation7.5 High
- zulip serverZulip Server 1.5.1 and below suffer from an error in the implementation of the...6.5 Medium
- open-emr openemrOpenEMR 5.0.0 and prior allows low-privilege users to upload files of dangerous types which can...8.8 High
- bigtreecms bigtree cmsMultiple CSRF issues exist in BigTree CMS through 4.2.18 - the clear parameter to core\admin...8.8 High
- bigtreecms bigtree cmsBigTree CMS through 4.2.18 does not prevent a user from deleting their own account. This could...6.5 Medium
- digium certified asterisk, open source +1 morePJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified...7.5 High
- Show moreLoading…