CVEs published in June 2017
1,091 vulnerabilities, 142 critical, 5 exploited.
- foscam c1 indoor hd camera firmware, indoor ip camera c1 series +1 moreIn the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2...8.8 High
- foscam c1 indoor hd camera firmware, indoor ip camera c1 series +1 moreIn the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2...8.8 High
- foscam c1 indoor hd camera firmware, indoor ip camera c1 series +1 moreAn exploitable command injection vulnerability exists in the web management interface used by the...8.8 High
- foscam c1 indoor hd camera firmware, indoor ip camera c1 series +1 moreIn the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2...8.8 High
- google android, lenovo group ltd. vibe and lenovo china-only moto mobile phones +1 moreOn Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be...6.4 Medium
- google android, lenovo group ltd. vibe and lenovo china-only moto mobile phones +1 moreOn Lenovo VIBE mobile phones, the Idea Friend Android application allows private data to be...6.4 Medium
- google android, lenovo group ltd. vibe and lenovo china-only moto mobile phones +1 moreOn Lenovo VIBE mobile phones, improper access controls on the nac_server component can be abused...7.8 High
- lenovo nerve centerPrivilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems ...5.5 Medium
- tibco jasperreports library community edition, jasperreports library for activematrix bpm, jasperreports professional +6 more +8 moreTIBCO JasperReports Library Information Disclosure4.1 Medium
- tibco jasperreports server, jaspersoft, jaspersoft reporting and analytics +4 more +6 moreTIBCO JasperReports Server cross-site vulnerabilities5.7 Medium
- microsoft corporation azure ad connect, microsoft azure active directory connect +1 moreAzure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to...8.1 High
- microsoft windows 10, windows server 2016, microsoft corporation windows +2 moreThe DirectX component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016...7.0 High
- microsoft windows 10, windows server 2016, microsoft corporation windows +2 moreThe graphics component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016...7.0 High
- microsoft windows 10, windows server 2016, microsoft corporation windows +2 moreThe kernel in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an...5.5 Medium
- microsoft malware protection engine, endpoint protection, forefront endpoint protection +3 more +5 moreThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe kernel in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and...4.7 Medium
- ibm informix dynamic server, informix servers +1 moreIBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow...6.5 Medium
- get-simple getsimple cmsadmin/profile.php in GetSimple CMS 3.x has XSS in a name field.6.1 Medium
- sthttpd project sthttpdHeap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1...7.8 High
- gnupg libgcrypt, canonical ubuntu linux, debian linux +2 morelibgcrypt before version 1.7.8 is vulnerable to a cache side-channel attack resulting into a...6.1 Medium
- isc bind, bind 9, debian linux +6 more +8 moreAn error in TSIG authentication can permit unauthorized dynamic updates7.5 High
- isc bind, bind 9, debian linux +6 more +8 moreAn error in TSIG authentication can permit unauthorized zone transfers5.3 Medium
- libtiffIn LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array...7.5 High
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in...7.8 High
- xml-libxml project xml-libxml, debian linux +1 moreUse-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to...9.8 Critical
- zen-cart zen cartIn index.php in Zen Cart 1.6.0, the products_id parameter can cause XSS.6.1 Medium
- arcadyan swisscom internet-box firmwareAuthorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box)...7.5 High
- ibm curam social program management, cram social program management +1 moreIBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting. This...5.4 Medium
- apache igniteApache Ignite communicates to an external PHP server where sensitive information is sent7.5 High
- biscom secure file transferBiscom Secure File Transfer versions 5.0.0.0 trough 5.1.1024 are vulnerable to post...5.4 Medium
- libdwarf project libdwarfThe _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows...6.5 Medium
- ffmpegThe cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3...7.8 High
- ffmpeglibavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data,...7.8 High
- ffmpeg, debian linux +1 morelibavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3...7.8 High
- ffmpeg, debian linux +1 moreFFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2...7.5 High
- ffmpeg, debian linux +1 moreHeap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8...8.8 High
- ffmpegHeap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg...7.8 High
- ffmpegStack-based buffer overflow in the color_string_to_rgba function in libavcodec/xpmdec.c in FFmpeg...8.8 High
- libming, debian linux +1 moreutil/outputtxt.c in libming 0.4.8 mishandles memory allocation. A crafted input will lead to a...6.5 Medium
- libming, debian linux +1 moreThe readEncUInt30 function in util/read.c in libming 0.4.8 mishandles memory allocation. A...6.5 Medium
- libavThere is a heap-based buffer overflow in the function hpel_motion in mpegvideo_motion.c in libav...7.5 High
- linux kernelThe intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local...7.8 High
- linux kernel, canonical ubuntu linux +1 moreThe snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c in the Linux kernel through 4...7.8 High
- linux kernelThe snd_msnd_interrupt function in sound/isa/msnd/msnd_pinnacle.c in the Linux kernel through 4...7.8 High
- vimbadminViMbAdmin CSRF Vulnerabilities8.8 High
- apple iphone osUse after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS...8.8 High
- redhat storage console, storage console node +1 morerhscon-ceph in Red Hat Storage Console 2 x86_64 and Red Hat Storage Console Node 2 x86_64 allows...7.8 High
- elog project elog, fedoraproject fedora +1 moreelog 3.1.1 allows remote attackers to post data as any username in the logbook.7.5 High
- freeipaFreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services.7.5 High
- hp helion openstack glanceThe glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to...8.4 High
- Show moreLoading…