CVEs published in June 2017
1,091 vulnerabilities, 142 critical, 5 exploited.
- zenbershipSQL Injection exists in admin/index.php in Zenbership 1.0.8 via the filters array parameter,...8.8 High
- ipfireIPFire 2.19 has a Remote Command Injection vulnerability in ids.cgi via the OINKCODE parameter,...8.8 High
- dfsol nuevomailerSQL injection vulnerability in rdr.php in nuevoMailer version 6.0 and earlier allows remote...9.8 Critical
- emc vnx1 firmware, vnx2 firmware +1 moreIn EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80...7.3 High
- emc vnx1 firmware, vnx2 firmware +1 moreIn EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80...7.8 High
- emc vnx1 firmware, vnx2 firmware +1 moreIn EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80...9.8 Critical
- gnu binutilsThe aarch64_ext_ldst_reglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote...7.8 High
- gnu binutilsopcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode,...7.8 High
- gnu binutilsThe process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka...7.8 High
- gnu binutilsThe versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka...7.8 High
- gnu binutilsbfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU...7.8 High
- gnu binutilsopcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote...7.8 High
- gnu binutilsopcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which...7.8 High
- gnu binutilsThe *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a...7.8 High
- gnu binutilsThe ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd)...7.8 High
- gnu binutilsThe ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd...7.8 High
- gnu binutilsThe disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause...7.8 High
- gnu binutilsThe _bfd_vms_slurp_etir function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library ...7.8 High
- gnu binutilsThe sh_elf_set_mach_from_flags function in bfd/elf32-sh.c in the Binary File Descriptor (BFD)...7.8 High
- gnu binutilsThe print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote...7.8 High
- gnu binutilsThe score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers...7.8 High
- apache http serverIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the...9.8 Critical
- apache http server, apple mac os x, debian linux +10 more +12 moreThe HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token...7.5 High
- apache http serverIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL...9.8 Critical
- apache http server, apple mac os x, debian linux +11 more +13 moreIn Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by...9.8 Critical
- libffi project libffi, debian linux, oracle peopletools +3 more +5 morelibffi requests an executable stack allowing attackers to more easily trigger arbitrary code...7.0 High
- exim, debian linux +1 moreExim supports the use of multiple "-p" command line arguments which are malloc()'ed and never...4.0 Medium
- gnu glibc, debian linux, mcafee web gateway +17 more +19 moreglibc contains a vulnerability that allows specially crafted LD_LIBRARY_PATH values to manipulate...7.8 High
- linux kernelAn issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack...7.4 High
- projectsendinstall/make-config.php in ProjectSend r754 allows remote attackers to execute arbitrary PHP code...9.8 Critical
- cmsmadesimple cms made simpleIn admin\addgroup.php in CMS Made Simple 2.1.6, when adding a user group, there is no XSS...6.1 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac...6.5 Medium
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreInsufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac,...8.8 High
- google chrome, redhat enterprise linux desktop, enterprise linux server +1 more +3 moreA use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux,...8.8 High
- libexpat project libexpat, debian linux, python +2 moreXML External Entity vulnerability in libexpat 2.2.0 and earlier (Expat XML Parser Library) allows...7.5 High
- spipSPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the...9.8 Critical
- linux kernelsound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA ...5.5 Medium
- jython project jython, debian linux +1 moreDeserialization of Untrusted Data in Jython9.8 Critical
- citrix xenmobile serverXML external entity (XXE) vulnerability in Citrix XenMobile Server 9.x and 10.x before 10.5 RP3...7.5 High
- apache thriftThe client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to...6.5 Medium
- eclipse jetty, debian linux, oracle communications cloud native core policy +4 more +6 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 High
- elastic kibanaKibana versions prior to 5.2.1 configured for SSL client access, file descriptors will fail to be...7.5 High
- elastic kibana, x-pack security +1 moreWith X-Pack installed, Kibana versions before 5.3.1 have an open redirect vulnerability on the...6.1 Medium
- elastic x-pack, x-pack security +1 moreX-Pack 5.1.1 did not properly apply document and field level security to multi-search and multi...7.5 High
- elastic x-pack security, x-pack +1 moreX-Pack Security 5.2.x would allow access to more fields than the user should have seen if the...5.9 Medium
- elastic kibanaKibana versions after and including 4.3 and before 4.6.2 are vulnerable to a cross-site scripting...6.1 Medium
- elastic kibanaKibana versions before 4.6.3 and 5.0.1 have an open redirect vulnerability that would enable an...6.1 Medium
- elastic kibana, x-pack security +1 moreWith X-Pack installed, Kibana versions 5.0.0 and 5.0.1 were not properly authenticating requests...6.5 Medium
- elastic logstashLogstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting...7.5 High
- elastic logstash, elasticsearch output plugin +1 moreLogstash Logs Sensitive Information6.5 Medium
- Show moreLoading…