CVEs published in June 2017
1,091 vulnerabilities, 142 critical, 5 exploited.
- cloud foundry uaa, cloudfoundry cf-release, pivotal software cloud foundry uaa +1 more +3 moreCloud Foundry UAA password reset vulnerability7.2 High
- pivotal pcf tile generatorAn issue was discovered in Pivotal PCF Tile Generator versions prior to 6.0.0. Tiles created by...7.5 High
- cloud foundry uaa, cloudfoundry cf-release, pivotal software cloud foundry uaa +1 more +3 moreBlind SQL Injection with privileged Cloud Foundry UAA endpoints6.5 Medium
- cloud foundry uaa, pivotal software cloud foundry uaa, cloudfoundry cloud foundry uaa bosh +1 more +3 moreCloud Foundry UAA Privilege Escalation8.8 High
- cloud foundry uaa, cloudfoundry cf-release, cloud foundry uaa bosh +1 more +3 moreAn issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA...7.5 High
- broadcom spring web flowInsecure Default Initialization of Resource in Pivotal Spring Web Flow5.9 Medium
- cloudfoundry cf-release, cloud foundry, staticfile buildpack +2 moreAn issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack...5.9 Medium
- pivotal software rabbitmq, broadcom rabbitmq server, debian linux +2 moreAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...6.1 Medium
- pivotal software rabbitmq, broadcom rabbitmq server, debian linux +2 moreAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...7.8 High
- pivotal software rabbitmq, broadcom rabbitmq server, debian linux +2 moreAn issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x...6.1 Medium
- pivotal software cloud foundry cf-release, cloud foundry uaa, cloud foundry uaa-release +2 moreAn issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier...8.1 High
- cloud foundry boshAn issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3...8.8 High
- pivotal software cloud foundry elastic runtimeAn issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x...8.8 High
- pivotal software cloud foundry elastic runtimeAn issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x...9.8 Critical
- pivotal software cloud foundry elastic runtimeAn issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.60, 1.7.x...9.8 Critical
- cloudfoundry capi-release, cf-release, cloud foundry +2 moreAn issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI...6.5 Medium
- cloudfoundry cf-release, cloud foundry, routing-release +2 moreAn issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and...9.8 Critical
- cloudfoundry cf-mysql-release, cloud foundry, cf-release +2 moreAn issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245...9.8 Critical
- linux kernelThe vmw_gb_surface_define_ioctl function (accessible via DRM_IOCTL_VMW_GB_SURFACE_CREATE) in...5.5 Medium
- ibm rational doors next generation, rational requirements composer +1 moreIBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to HTML injection. A remote...5.4 Medium
- ibm rational doors next generation, rational requirements composer +1 moreIBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm rational doors next generation, rational requirements composer +1 moreIBM DOORS Next Generation (DNG/RRC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This...5.4 Medium
- hcl software inotesIBM iNotes 8.5 and 9.0 could allow a remote attacker to send a malformed email to a victim, that...5.7 Medium
- apache nifiOrigin Validation Error in Apache NiFi7.5 High
- apache nifiCross-site Scripting in Apache NiFi6.1 Medium
- echatserver easy chat serverregister.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to...7.5 High
- goldplugins testimonials plugin easy testimonialsSQL injection vulnerability in the WP-Testimonials plugin 3.4.1 for WordPress allows an...8.8 High
- gnu glibcnscd in the GNU C Library (aka glibc or libc6) before version 2.20 does not correctly compute the...9.8 Critical
- bigtreecms bigtree cmsadmin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows...5.4 Medium
- bigtreecms bigtree cmsadmin.php in BigTree through 4.2.18 has a Cross-site Scripting (XSS) vulnerability, which allows...5.4 Medium
- bigtreecms bigtree cmsadmin.php in BigTree through 4.2.18 allows remote authenticated users to cause a denial of...5.7 Medium
- echatserver easy chat serverThere is a remote stack-based buffer overflow (SEH) in register.ghp in EFS Software Easy Chat...9.8 Critical
- echatserver easy chat serverregister.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to...7.5 High
- libquicktimeThe quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote...6.5 Medium
- libquicktimeThe quicktime_user_atoms_read_atom function in useratoms.c in libquicktime 1.2.4 allows remote...6.5 Medium
- libquicktimeThe quicktime_read_dref_table function in dref.c in libquicktime 1.2.4 allows remote attackers to...6.5 Medium
- libquicktimeThe lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers...6.5 Medium
- libquicktimeThe quicktime_match_32 function in util.c in libquicktime 1.2.4 allows remote attackers to cause...6.5 Medium
- libquicktimeThe lqt_frame_duration function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers...6.5 Medium
- libquicktimeThe quicktime_read_moov function in moov.c in libquicktime 1.2.4 allows remote attackers to cause...6.5 Medium
- gnome libcroco, opensuse leap +1 moreThe cr_parser_parse_selector_core function in cr-parser.c in libcroco 0.6.12 allows remote...6.5 Medium
- gnome libcroco, opensuse leap +1 moreThe cr_tknzr_parse_comment function in cr-tknzr.c in libcroco 0.6.12 allows remote attackers to...6.5 Medium
- flexera software llc libsndfileIn libsndfile version 1.0.28, an error in the "aiff_read_chanmap()" function (aiff.c) can be...8.8 High
- ruby-lang rubyNet::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a...6.1 Medium
- d-link dir-615 firmwareD-Link DIR-615 Wireless N 300 Router allows authentication bypass via a modified POST request to...9.8 Critical
- mruby, debian linux +1 moreThe mark_context_stack function in gc.c in mruby through 1.2.0 allows attackers to cause a denial...7.8 High
- [unknown] ansible, canonical ubuntu linux, debian linux +7 more +9 moreAnsible fails to properly mark lookup-plugin results as unsafe5.3 Medium
- red hat ansible, redhat ansible engine, virtualization +2 moreImproper Input Validation in ansible2.2 Low
- red hat ansibleAnsible apt_key module does not properly verify key fingerprint6.3 Medium
- gnupg libgcryptIn Libgcrypt before 1.7.7, an attacker who learns the EdDSA session key (from side-channel...5.9 Medium
- Show moreLoading…