CVEs published in June 2017
1,091 vulnerabilities, 142 critical, 5 exploited.
- corega cg-wlr300nx firmware, corega inc cg-wlr300nx +1 moreCorega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment...8.8 High
- corega cg-wlr300nx firmware, corega inc cg-wlr300nx +1 moreCross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows...4.8 Medium
- corega cg-wlr300nx firmware, corega inc cg-wlr300nx +1 moreCross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and...8.8 High
- corega inc cg-wlbargmh, cg-wlbargnl, corega cg-wlbaragm firmware +1 more +3 moreCross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers...6.1 Medium
- i-o data device, inc. wfs-sr01, iodata wfs-sr01 firmware +1 moreI-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass...7.5 High
- i-o data device, inc. wfs-sr01, iodata wfs-sr01 firmware +1 moreI-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute...9.8 Critical
- nihon unisys, ltd. mobigate app for android, mobigate app for ios, unisys mobigate +2 moreThe mobiGate App for Android version 2.2.1.2 and earlier and mobiGate App for iOS version 2.2.4.1...5.9 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreSQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated...8.8 High
- cybozu garoonDirectory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated...6.5 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site request forgery (CSRF) vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors.8.8 High
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to...6.1 Medium
- japan agency for local authority information systems the public certification service for individuals "the jpki user's software (for windows 7 and later)", the public certification service for individuals "the jpki user's software (for windows vista)", the public certification service for individuals "the jpki user's software" +3 more +5 moreUntrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI...7.8 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +14 more +16 moreA stored cross-site scripting (XSS) vulnerability in the Configuration utility device name change...5.4 Medium
- sophos web applianceThe Sophos Web Appliance before 4.3.2 has XSS in the FTP redirect page, aka NSWA-1342.6.1 Medium
- otrs, debian linux +1 moreIn Open Ticket Request System (OTRS) 3.3.x through 3.3.16, 4.x through 4.0.23, and 5.x through 5...8.8 High
- gnu gnutlsGnuTLS version 3.5.12 and earlier is vulnerable to a NULL pointer dereference while decoding a...7.5 High
- ibm tivoli federated identity managerIBM Tivoli Federated Identity Manager 6.2 is affected by a vulnerability due to a missing secure...7.5 High
- ibm bigfix compliance analytics, bigfix security compliance analytics +1 moreIBM BigFix Compliance Analytics 1.9.79 uses weaker than expected cryptographic algorithms that...5.9 Medium
- ibm business process manager, business process manager advanced +1 moreIBM Business Process Manager 8.0 and 8.5 are vulnerable to cross-site scripting. This...5.4 Medium
- ibm sterling order management, sterling selling and fulfillment foundation +1 moreIBM Sterling Order Management 9.2 through 9.5 is vulnerable to cross-site request forgery which...8.0 High
- ibm websphere application serverIBM WebSphere Application Server using malformed SOAP requests could allow a remote attacker to...5.3 Medium
- ibm rational rhapsody design managerIBM Rhapsody DM 4.0, 5.0, and 6.0 is vulnerable to a denial of service, caused by an XML External...8.1 High
- ibm maximo asset managementIBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow an authenticated user to view incorrect...4.3 Medium
- ibm tivoli key lifecycle manager, security key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager 2.0.1, 2.5, and 2.6 specifies permissions for a security...8.1 High
- ibm tivoli key lifecycle manager, security key lifecycle manager +1 moreIBM Tivoli Key Lifecycle Manager does not require that users should have strong passwords by...9.8 Critical
- huawei s12700 firmware, s2300 firmware, s2350ei firmware +19 more +21 moreThe IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a...7.5 High
- slideshow project slideshowThe SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function in the Slideshow plugin 2.2...7.5 High
- adblockAdBlock before 2.21 allows remote attackers to block arbitrary resources on arbitrary websites...10.0 Critical
- zend frameworkZend Framework CSRF Vulnerability8.8 High
- open-xchange appsuite, server +1 moreMultiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server 6 and OX AppSuite...6.1 Medium
- bluecoat advanced secure gateway, cacheflow, proxysg +2 moreBlue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, ProxySG 6.5 and 6.6 allows remote attackers...7.5 High
- acer portalAcer Portal app before 3.9.4.2000 for Android does not properly validate SSL certificates, which...5.3 Medium
- google androidb/libs/gui/ISurfaceComposer.cpp in Android allows attackers to trigger a denial of service (null...7.5 High
- vmware horizon view, horizon view client for mac +1 moreVMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection...9.8 Critical
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 more389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...7.5 High
- redhat enterprise linux desktop, enterprise linux hpc node, enterprise linux server +1 more +3 more389 Directory Server in Red Hat Enterprise Linux Desktop 6 through 7, Red Hat Enterprise Linux...9.8 Critical
- pulpproject pulp, fedoraproject fedora +1 moreserver/bin/pulp-gen-ca-certificate in Pulp before 2.8.2 allows local users to read the generated...5.5 Medium
- redhat cloudformsManageIQ in CloudForms before 4.1 allows remote authenticated users to execute arbitrary code.8.8 High
- redhat cloudforms management engineCloudForms Management Engine before 5.8 includes a default SSL/TLS certificate.7.5 High
- redhat jboss enterprise application platformThe PooledInvokerServlet in JBoss EAP 4.x and 5.x allows remote attackers to execute arbitrary...9.8 Critical
- pulpproject pulpclient/consumer/cli.py in Pulp before 2.8.3 writes consumer private keys to etc/pki/pulp/consumer...7.5 High
- pulpproject pulppulp.spec in the installation process for Pulp 2.8.3 generates the RSA key pairs used to validate...5.5 Medium
- pulpproject pulpThe pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or...7.1 High
- pulpproject pulpThe Node certificate in Pulp before 2.8.3 contains the private key, and is stored in a world...5.5 Medium
- cloud foundry diegoCloud Foundry Diego 0.1468.0 through 0.1470.0 allows remote attackers to cause a denial of service.7.5 High
- arubanetworks clearpassSQL injection vulnerability in ClearPass Policy Manager 6.5.x through 6.5.6 and 6.6.0.9.8 Critical
- Show moreLoading…