CVEs published in June 2017
1,091 vulnerabilities, 142 critical, 5 exploited.
- redhat ansibleAnsible Arbitrary Code Execution8.8 High
- qemu, debian linux +1 moreQEMU (aka Quick Emulator), when built with the e1000e NIC emulation support, allows local guest...5.6 Medium
- cisofy lynisUnspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly...7.8 High
- red5 media serverThe AMF unmarshallers in Red5 Media Server before 1.0.8 do not restrict the classes for which it...9.8 Critical
- huawei s5300 firmware, s5700 firmware, s6300 firmware +4 more +6 moreThe user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with...7.5 High
- huawei ar1220 firmwareHuawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a...5.9 Medium
- huawei oceanstor uds firmwareThe XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows...5.0 Medium
- huawei oceanstor uds firmwareHuawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers...8.8 High
- huawei oceanstor uds firmwareThe DeviceManager in Huawei OceanStor UDS devices with software before V100R002C01SPC102 might...7.5 High
- seagate business nas firmwareSeagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute...9.8 Critical
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreBuffer overflow in the mcpq daemon in F5 BIG-IP systems 10.x before 10.2.4 HF12, 11.x before 11.2...4.9 Medium
- ibm curam social program managementCuram Universal Access in IBM Curam Social Program Management (SPM) 6.0 SP2 before EP26, 6.0.4...5.3 Medium
- radare radare2The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to...5.5 Medium
- atmailatmail before 7.8.0.2 has CSRF, allowing an attacker to create a user account.8.8 High
- atmailatmail before 7.8.0.2 has CSRF, allowing an attacker to change the SMTP hostname and hijack all...8.8 High
- atmailatmail before 7.8.0.2 has CSRF, allowing an attacker to upload and import users via CSV.8.8 High
- craftcms craft cmsCraft CMS XSS Vulnerability5.4 Medium
- cisco telepresence ce software, telepresence tc software +1 moreA vulnerability in the Session Initiation Protocol (SIP) of the Cisco TelePresence Codec (TC) and...7.5 High
- cisco prime data center network managerA vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an...9.8 Critical
- cisco prime data center network managerA vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Data Center...9.8 Critical
- cisco anyconnect secure mobility clientA vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for...7.8 High
- vmware horizon view, workstation, horizon view client for windows +2 moreVMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an...7.8 High
- vmware horizon view, workstation, horizon view client for windows +2 moreVMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain...7.8 High
- vmware horizon view, workstation, horizon view client for windows +2 moreVMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain...7.8 High
- vmware horizon view, workstation, horizon view client for windows +2 moreVMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain...7.8 High
- vmware horizon view, workstation, horizon view client for windows +2 moreVMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a...7.8 High
- vmware horizon view, workstation, horizon view client for windows +2 moreVMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain...7.8 High
- vmware horizon view, unified access gateway +1 moreVMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to...9.8 Critical
- vmware fusion, workstation, fusion pro / fusion +1 more +3 moreThe drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x...9.9 Critical
- eduiq net monitor for employeesNet Monitor for Employees Pro through 5.3.4 has an unquoted service path, which allows a Security...7.3 High
- qemu, debian linux +1 moreQEMU (aka Quick Emulator) before 2.9.0, when built with the USB OHCI Emulation support, allows...5.6 Medium
- zcms project zcmsSQL injection vulnerability in ZCMS 1.1.9.8 Critical
- markdown-it project markdown-itmarkdown-it before 4.1.0 does not block data: URLs.5.3 Medium
- wordpress backup to dropbox project backup to dropboxCross-site scripting (XSS) vulnerability in the WordPress Backup to Dropbox plugin before 4.1 for...6.1 Medium
- gnu libsspBinaries compiled against targets that use the libssp library in GCC for stack smashing...7.8 High
- call-cc spiffyDirectory traversal vulnerability in Spiffy before 5.4.7.5 High
- vindulaCross-site scripting (XSS) vulnerability in Vindula 1.9.5.4 Medium
- igcb intellect digital coreCross-site scripting (XSS) vulnerability in Intellect Design Arena Intellect Core banking software.6.1 Medium
- redhat ansibleAnsible Sandbox Escape via Symlink Attack7.8 High
- cornelisnetworks opa-ff, opa-fm +1 moreRace conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197.8.1 High
- apache cxf fedizApache CXF Fediz application plugins are vulnerable to Denial of Service (DoS) attacks7.5 High
- subsonicXML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might...7.4 High
- schneider-electric somachine, schneider electric se somachine hvac programming software +1 moreA DLL Hijacking vulnerability in the programming software in Schneider Electric's SoMachine HVAC...8.8 High
- schneider-electric somachine hvac, schneider electric se somachine hvac programming software +1 moreA buffer overflow vulnerability exists in Programming Software executable AlTracePrint.exe, in...7.3 High
- vmware esxi, fusion, fusion pro / fusion +4 more +6 moreVMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6...5.5 Medium
- vmware esxi, fusion, fusion pro / fusion +4 more +6 moreThe XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch...8.8 High
- vmware esxi, fusion, fusion pro / fusion +4 more +6 moreVMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6...8.8 High
- vmware esxi, fusion, fusion pro / fusion +4 more +6 moreVMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG;...8.8 High
- vmware workstation pro/player, workstation pro, workstation player +2 moreVMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference...5.5 Medium
- vmware workstation pro/player, workstation pro, workstation player +2 moreVMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in...4.7 Medium
- Show moreLoading…