CVEs published in June 2017
1,091 vulnerabilities, 142 critical, 5 exploited.
- symantec messaging gatewayThe Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a...10.0 Critical
- symantec messaging gatewayThe Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of...6.6 Medium
- symantec messaging gatewayThe Symantec Messaging Gateway, when processing a specific email attachment, can allow a...7.3 High
- radare radare2The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to...7.8 High
- fortinet forticlientIn FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a...8.8 High
- cobblerCobbler Arbitrary File Read6.1 Medium
- redhat automatic bug reporting toolAutomatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have...7.8 High
- redhat virtio-winThe NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest...7.5 High
- redhat automatic bug reporting toolThe kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly...4.7 Medium
- redhat automatic bug reporting toolThe event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy...5.5 Medium
- microsoft skypeA stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36...8.8 High
- red hat, inc. fedora-arm-installer, fedoraproject arm installer +1 morefedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due...7.0 High
- tiki tikiwiki cms\/groupwareTikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the...6.1 Medium
- libtiffIn LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c. A crafted TIFF document can...6.5 Medium
- debian linux, long range zip project range zip +1 moreIn lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074,...5.5 Medium
- debian linux, long range zip project range zip +1 moreIn lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979,...5.5 Medium
- cognito moneyworksPassword exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain...9.8 Critical
- tp-link wr841n v8 firmwareThe executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a...9.8 Critical
- ntop ntopngntopng before 3.0 allows HTTP Response Splitting.7.5 High
- ntop ntopngntopng before 3.0 allows XSS because GET and POST parameters are improperly validated.6.1 Medium
- cisco virtualized packet coreA vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet...7.5 High
- cisco webex network recording player, webex advanced recording format player +1 moreMultiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for...7.8 High
- cisco evolved programmable network manager, prime infrastructure +1 moreA vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved...8.0 High
- mozilla firefox, firefox esr +1 moreThe Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any...5.5 Medium
- mozilla firefox, firefox esr +1 moreThe Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable...5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe Firefox installer on Windows can be made to load malicious DLL files stored in the same...7.8 High
- libtiff, canonical ubuntu linux, debian linux +2 moreIn LibTIFF 4.0.8, there is a memory leak in tif_jbig.c. A crafted TIFF document can lead to a...6.5 Medium
- libtiff, canonical ubuntu linux, debian linux +2 moreIn LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools...8.8 High
- lame project lameThe III_dequantize_sample function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99...7.8 High
- lame project lameThe III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and...7.8 High
- lame project lameThe III_i_stereo function in layer3.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and...5.5 Medium
- lame project lameThe II_step_one function in layer2.c in mpglib, as used in libmpgdecoder.a in LAME 3.99.5 and...5.5 Medium
- lame project lameThe fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3...5.5 Medium
- lame project lameThe fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote...5.5 Medium
- lame project lameThe lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to...5.5 Medium
- eclipse mosquitto, debian linux +1 moreIn Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which...5.5 Medium
- dolibarrDolibarr ERP and CRM Unsafe File Upload Vulnerability8.8 High
- freedesktop poppler, debian linux +1 moreThe function GfxImageColorMap::getGray in GfxState.cc in Poppler 0.54.0 allows remote attackers...5.5 Medium
- easysitecms easysiteSQL injection vulnerability in C_InfoService.asmx in WebServices in Easysite 7.0 could allow...9.8 Critical
- libtorrentThe bdecode function in bdecode.cpp in libtorrent 1.1.3 allows remote attackers to cause a denial...5.5 Medium
- magicwinmail winmail serverWinmail Server 6.1 allows remote code execution by authenticated users who leverage directory...8.8 High
- piwigoCross-site scripting (XSS) vulnerability in Piwigo 2.9.1 allows remote authenticated...4.8 Medium
- boa/cgi-bin/wapopen in BOA Webserver 0.94.14rc21 allows the injection of "../.." using the...7.5 High
- libmtp project libmtpAn integer overflow vulnerability in ptp-pack.c (ptp_unpack_OPL function) of libmtp (version 1.1...6.8 Medium
- libmtp project libmtpAn integer overflow vulnerability in the ptp_unpack_EOS_CustomFuncEx function of the ptp-pack.c...6.8 Medium
- drupal, drupal core, debian linux +2 moreFiles uploaded by anonymous users into a private file system can be accessed by other anonymous users6.5 Medium
- vivotek network camera fd8164 firmware, network camera fd816ba firmware, network camera ib8369 firmware +2 more'/cgi-bin/admin/downloadMedias.cgi' of the web service in most of the VIVOTEK Network Cameras is...7.5 High
- vivotek network camera fd8164 firmware, network camera fd816ba firmware, network camera ib8369 firmware +2 more'/cgi-bin/admin/testserver.cgi' of the web service in most of the VIVOTEK Network Cameras is...9.8 Critical
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2 stores potentially sensitive information from...5.5 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This...5.4 Medium
- Show moreLoading…