CVEs published in June 2017
1,091 vulnerabilities, 142 critical, 5 exploited.
- meafinancial fccbThe First Citizens Community Bank fccb/id809930960 app 3.0.1 for iOS does not verify X.509...5.9 Medium
- meafinancial freedom 1st credit union mobile bankingThe Freedom First freedom-1st-credit-union-mobile-banking/id1085229458 app 3.0.0 for iOS does not...5.9 Medium
- lbtc lee bank \& trustThe Lee Bank & Trust lbtc-mobile/id1068984753 app 3.0.1 for iOS does not verify X.509...5.9 Medium
- cayugalakenationalbank cayuga lake national bankThe cayuga-lake-national-bank/id1151601539 app 4.0.1 for iOS does not verify X.509 certificates...5.9 Medium
- meafinancial vision bankThe MEA Financial vision-bank/id420406345 app 3.0.1 for iOS does not verify X.509 certificates...5.9 Medium
- wawacu wawa employees credit union mobileThe wawa-employees-credit-union-mobile/id1158082793 app 4.0.1 for iOS does not verify X.509...5.9 Medium
- saltstack saltSaltStack Salt arbitrary command execution in Salt-api via ssh_client8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe "Mark of the Web" was not correctly saved on Windows when files with very long names were...7.5 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDefault fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar...5.3 Medium
libqt5-qtbaseSUSE,libqt5-qtdeclarativeSUSE +1 moreSecurity update for libqt5-qtbase, libqt5-qtdeclarativeNo score- hoytech antiwebIn Anti-Web through 3.8.7, as used on NetBiter FGW200 devices through 3.21.2, WS100 devices...9.1 Critical
- qemu, debian linux +1 moreQEMU (aka Quick Emulator), when built with MegaRAID SAS 8708EM2 Host Bus Adapter emulation...5.5 Medium
- qemu, debian linux +1 moreQEMU (aka Quick Emulator), when built with USB xHCI controller emulator support, allows local...5.5 Medium
- qemuMemory leak in QEMU (aka Quick Emulator), when built with USB EHCI Emulation support, allows...5.5 Medium
- qemu, debian linux +1 moreMemory leak in QEMU (aka Quick Emulator), when built with IDE AHCI Emulation support, allows...5.5 Medium
- microsoft windows server 2003, windows xp, microsoft corporation windows +2 moreWindows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a...7.8 High
- microsoft windows server 2003, windows xp, microsoft corporation windows +2 moreWindows RPC with Routing and Remote Access enabled in Windows XP and Windows Server 2003 allows...7.8 High
- qnap qtsThis command injection vulnerability in QTS allows attackers to run arbitrary commands in the...10.0 Critical
- qnap qtsQNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function.7.5 High
- dlink dir-605l firmwareOn D-Link DIR-605L devices, firmware before 2.08UIBetaB01.bin allows an unauthenticated GET...7.5 High
- webhammer wp custom fields searchCross-site scripting (XSS) vulnerability in the Webhammer WP Custom Fields Search plugin 0.3.28...6.1 Medium
- simpleceIn SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1...5.4 Medium
- simpleceIn SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account (via the...8.8 High
- sap successfactorsStored Cross-site scripting (XSS) vulnerability in SAP SuccessFactors before b1705.1234962 allows...5.4 Medium
- atlassian confluence, confluence server +1 moreAtlassian Confluence starting with 4.3.0 before 6.2.1 did not check if a user had permission to...4.3 Medium
- flexera flexnet publisherIn FlexNet Publisher versions before Luton SP1 (11.14.1.1) running FlexNet Publisher Licensing...7.8 High
- rapid7 metasploit, metasploit (pro, express, and community editions) +1 moreRoutes used to stop running Metasploit tasks (either particular ones or all tasks) allowed GET...3.5 Low
- avira mobile securityThe Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext.7.5 High
- gnuplotAn uninitialized stack variable vulnerability in load_tic_series() in set.c in gnuplot 5.2.rc1...7.8 High
- ibm api connectIBM API Connect 5.0.0.0 could allow a remote attacker to obtain sensitive information, caused by...7.5 High
- ibm bigfix compliance analytics, bigfix security compliance analytics +1 moreIBM BigFix Compliance (TEMA SUAv1 SCA SCM) uses an inadequate account lockout setting that could...9.8 Critical
- infotecs vipnet client, vipnet coordinator +1 moreInfotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by...7.3 High
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 1703 allows an attacker to trick a user into loading a...4.3 Medium
- microsoft windows 8.1, windows rt 8.1, windows server 2008 +3 more +5 moreAn information disclosure vulnerability exists in Microsoft Windows Server 2008 SP2 and R2 SP1,...4.7 Medium
- microsoft windows 7, windows server 2008, microsoft corporation windows +2 moreA kernel-mode driver in Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2,...7.8 High
- microsoft sharepoint, project server +1 moreAn elevation of privilege vulnerability exists when Microsoft SharePoint software fails to...6.1 Medium
- microsoft skype for business, office +1 moreA remote code execution vulnerability exists in Skype for Business when the software fails to...5.4 Medium
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows...7.5 High
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows...7.5 High
- microsoft internet explorerInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows...7.5 High
- microsoft outlook for mac, outlook +1 moreA spoofing vulnerability exists in when Microsoft Outlook for Mac does not sanitize html properly...6.5 Medium
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreMicrosoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1,...5.5 Medium
- microsoft windows, windows 7, windows 8.1 +8 more +10 moreMicrosoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7...9.8 Critical
- microsoft office, windows 7, windows server 2008 +1 more +3 moreUniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012...6.5 Medium
- microsoft windows 10, windows 7, windows 8.1 +6 more +8 moreGraphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012...6.5 Medium
- microsoft windows 10, windows 7, windows 8.1 +6 more +8 moreGraphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012...6.5 Medium
- microsoft office, windows 10, windows 7 +6 more +8 moreGraphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012...6.5 Medium
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows...5.4 Medium
- microsoft internet explorer, edge +1 moreInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows...6.5 Medium
- microsoft office, windows 7, windows 8.1 +4 more +6 moreUniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012...8.8 High
- Show moreLoading…