CVEs published in June 2017
1,091 vulnerabilities, 142 critical, 5 exploited.
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection. A remote...8.8 High
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2 could allow a local user view sensitive...5.5 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2 could allow user to obtain sensitive information...6.5 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain...6.5 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2 allows web pages to be stored locally which can...5.5 Medium
- ocamlInsufficient sanitisation in the OCaml compiler versions 4.04.0 and 4.04.1 allows external code...9.8 Critical
- mcafee data loss prevention endpoint, data loss prevention endpoint (dlpe) +1 moreCross Site Scripting (XSS) in IMG Tags in the ePO extension in McAfee Data Loss Prevention...5.4 Medium
- sitecore sitecore.netSitecore.NET 7.1 through 7.2 has a Cross Site Scripting Vulnerability via the searchStr parameter...6.1 Medium
- debian linux, linux kernel, [unknown] kernel: +7 more +9 moreA flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the...5.5 Medium
- matrixsslAn integer overflow vulnerability exists in the X509 certificate parsing functionality of...6.5 Medium
- inside secure matrixsslAn exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing...8.1 High
- inside secure matrixsslAn exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing...8.1 High
- ellislab expressionengineExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with...7.5 High
- red-gate sql monitorIn Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated...9.8 Critical
- ibm sterling b2b integratorIBM Sterling File Gateway does not properly restrict user requests based on permission level....4.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special...5.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain...6.5 Medium
- ibm rational engineering lifecycle manager, rational collaborative lifecycle management +1 moreIBM RELM 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows users...5.4 Medium
- ideablade breeze.server.netIdeaBlade Breeze Breeze.Server.NET before 1.6.5 allows remote attackers to execute arbitrary code...9.8 Critical
- microsoft windows xp, windows server 2003 sp1, sp2 windows xp - sp3, windows server 2003 +2 moreA buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through...8.1 High
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel...5.3 Medium
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel...5.3 Medium
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel...7.8 High
- rarlab unrar, sophos threat detection engine +1 moreA VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus...9.8 Critical
- golang go, fedoraproject fedora, novell suse package hub for suse linux enterprise +1 more +3 moreA bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in...5.9 Medium
- openwebif project openwebifAn issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. The saveConfig...9.8 Critical
- No product listedEnvironment variables injection in subprocess on WindowsNo score
- libtiff, canonical ubuntu linux +1 moreIn LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a...6.5 Medium
- freedesktop poppler, debian linux, redhat enterprise linux desktop +5 more +7 moreInteger overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler...7.8 High
- freedesktop poppler, debian linux, redhat enterprise linux desktop +5 more +7 moreStack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers...6.5 Medium
- c-ares, nodejs node.js +1 moreThe c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could...7.5 High
- jasper project jasperJasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read...5.5 Medium
- emc avamar serverIn EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an...9.8 Critical
- emc avamar serverIn EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an...9.8 Critical
- emc isilon onefsEMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege...7.2 High
- acronis true imageAcronis True Image up to and including version 2017 Build 8053 performs software updates using...8.8 High
- samsung magicianSamsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic. Prior...8.8 High
- glpi-project glpiMultiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to...7.5 High
- cambium networks epmp 1000 firmware, epmp 1000 hotspot firmware, epmp 2000 firmware +1 more +3 moreAn Improper Privilege Management issue was discovered in Cambium Networks ePMP. The privileges...7.6 High
- cambium networks epmp 1000 firmware, epmp 1000 hotspot firmware, epmp 2000 firmware +1 more +3 moreAn Improper Access Control issue was discovered in Cambium Networks ePMP. After a valid user has...6.8 Medium
- trihedral vtscadaA Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26. A...6.1 Medium
- ecava integraxorA SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior. The...9.8 Critical
- trihedral vtscadaAn Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26. Some...7.5 High
- trihedral vtscadaA Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26. The...7.5 High
- irfanviewAn exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of...8.8 High
- foscam c1 webcam firmware, foscan foscam c1 webcam +1 moreHard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12....9.8 Critical
- check mk project mkA cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to 1.4.0p6,...6.1 Medium
- horde image apiRemote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request....8.8 High
- horde imageDenial of Service was found in Horde_Image 2.x before 2.5.0 via a crafted URL to the "Null" image...5.7 Medium
- Show moreLoading…