CVEs published in June 2017
1,091 vulnerabilities, 142 critical, 5 exploited.
- vmware workstation pro/player, workstation pro, workstation player +2 moreVMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs...8.8 High
- vmware vsphere data protection (vdp), vsphere data protection +1 moreVMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server...9.8 Critical
- vmware vsphere data protection (vdp), vsphere data protection +1 moreVMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization...9.8 Critical
- ibm rational doors next generationIBM DOORS Next Generation (DNG/RRC) 6.0.2 and 6.0.3 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm bigfix security compliance analytics, endpoint manager for security and compliance +1 moreIBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong...9.8 Critical
- ibm endpoint manager for security and compliance, bigfix security compliance analytics +1 moreIBM Endpoint Manager for Security and Compliance 1.9.70 is vulnerable to cross-site scripting....6.1 Medium
- ibm cognos business intelligence, cognos business intelligence server +1 moreIBM Cognos Analytics 10.1 and 10.2 could allow a local user to craft a URL which could confirm...3.3 Low
- ibm maximo asset management, maximo asset management essentials +1 moreIBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a remote attacker to hijack a user's...8.8 High
- ibm cognos business intelligence, cognos business intelligence server +1 moreIBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include...5.3 Medium
- ibm spectrum protect, tivoli storage manager +1 moreIBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password...5.5 Medium
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 9.0.0.1 and 9.0.2 could allow a local user to write to a file or delete files in...5.5 Medium
- hcl software dominoIBM Domino 8.5 and 9.0 could allow an attacker to steal credentials using multiple sessions and...9.8 Critical
- ibm security privileged identity managerIBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores user credentials in plain in...5.5 Medium
- ibm security privileged identity managerIBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL...5.3 Medium
- ibm security access manager, security access manager 9.0 firmware +1 moreIBM Security Access Manager for Web 9.0.0 could allow an authenticated user to access some...4.3 Medium
- ibm security access manager, security access manager 9.0 firmware +1 moreIBM Security Access Manager for Web 9.0.0 uses weaker than expected cryptographic algorithms that...6.5 Medium
- ibm cognos business intelligenceIBM Cognos Business Intelligence 10.1 and 10.2 is vulnerable to a denial of service, caused by an...6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and...6.5 Medium
- google chromeInappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote...6.1 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows,...4.3 Medium
- google chromeFailure to take advantage of available mitigations in credit card autofill in Google Chrome prior...5.5 Medium
- debian linux, google chrome, redhat enterprise linux desktop +2 more +4 moreLack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for...3.3 Low
- google chromeA use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and...8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows,...4.3 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to...8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for...8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac,...6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for...4.3 Medium
- google chromeA use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a...8.0 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreUse after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux,...8.8 High
- google chromeInappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android...6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux...6.3 Medium
- google chrome, chromium v8, redhat enterprise linux desktop +2 more +4 moreType confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0...8.8 High
nagios3Ubuntunagios3 regressionNo score- trustedfirmware trusted firmware-aIn ARM Trusted Firmware through 1.3, the secure self-hosted invasive debug interface allows...7.5 High
- trustedfirmware trusted firmware-aIn ARM Trusted Firmware 1.3, RO memory is always executable at AArch64 Secure EL1, allowing...8.1 High
- imagemagickIn ImageMagick 7.0.5-8 Q16, an assertion failure was found in the function...6.5 Medium
- imagemagickIn ImageMagick 7.0.5-7 Q16, an assertion failure was found in the function...6.5 Medium
- iptables-parse project moduleThe IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files...5.5 Medium
- samsung galaxy s6 edge firmwareDirectory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G...7.5 High
- amd fglrx-driverAMD fglrx-driver before 15.9 allows local users to gain privileges via a symlink attack. NOTE:...7.8 High
- amd fglrx-driverAMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack.7.8 High
- openstack ironicOpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote...6.5 Medium
- milton webdavXML External Entity (XXE) vulnerability in Milton Webdav before 2.7.0.3.9.8 Critical
- personify personify360 e-businessAn issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId...7.5 High
- personify personify360 e-businessAn issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId...7.5 High
- personifycorp personify360An issue was discovered in Personify360 e-Business 7.5.2 through 7.6.1. When going to the /TabId...9.8 Critical
- sophos cyberoam firmwareAn XSS vulnerability allows remote attackers to execute arbitrary client side script on...6.1 Medium
- ytnef project ytnefIn ytnef 1.9.2, the DecompressRTF function in lib/ytnef.c allows remote attackers to cause a...5.5 Medium
- ytnef project ytnefIn ytnef 1.9.2, the SwapDWord function in lib/ytnef.c allows remote attackers to cause a denial...5.5 Medium
- Show moreLoading…