CVEs published in July 2017

1,338 vulnerabilities, 179 critical, 13 exploited.

• openjdk-8 Ubuntu openjdk-8 regression USN-3366-2 Fix available No scoreJuly 31, 2017
• connectwise manage services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary... CVE-2017-11727 6.1 MediumJuly 31, 2017
• connectwise manage services/system_io/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to... CVE-2017-11726 8.8 HighJuly 31, 2017
• techroutes tr 1803-3g firmware Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection... CVE-2017-11648 8.8 HighJuly 31, 2017
• ibm sterling b2b integrator IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This... CVE-2017-1496 5.4 MediumJuly 31, 2017
• ibm i IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin. Routing... CVE-2017-1460 7.5 HighJuly 31, 2017
• ibm api connect, api management +1 more IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant... CVE-2017-1386 5.9 MediumJuly 31, 2017
• ibm jazz reporting service IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user... CVE-2017-1370 4.9 MediumJuly 31, 2017
• hcl software inotes IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to... CVE-2017-1332 6.1 MediumJuly 31, 2017
• ibm websphere portal IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site... CVE-2017-1303 6.1 MediumJuly 31, 2017
• hclsoftware bigfix platform IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash... CVE-2017-1227 7.5 HighJuly 31, 2017
• ibm infosphere master data management, infosphere master data management server +1 more IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 could allow a... CVE-2016-9719 5.7 MediumJuly 31, 2017
• ibm infosphere master data management, infosphere master data management server +1 more IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 is vulnerable... CVE-2016-9718 5.4 MediumJuly 31, 2017
• ibm infosphere master data management, infosphere master data management server +1 more HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. 11... CVE-2016-9717 6.5 MediumJuly 31, 2017
• ibm infosphere master data management, infosphere master data management server +1 more IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to... CVE-2016-9716 8.8 HighJuly 31, 2017
• ibm infosphere master data management, infosphere master data management server +1 more IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to... CVE-2016-9715 5.4 MediumJuly 31, 2017
• ibm infosphere master data management, infosphere master data management server +1 more IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable... CVE-2016-9714 8.8 HighJuly 31, 2017
• projeqtor uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary... CVE-2017-11760 8.8 HighJuly 31, 2017
• eapmd5pass project eapmd5pass A length validation (leading to out-of-bounds read and write) flaw was found in the way... CVE-2017-11670 7.5 HighJuly 31, 2017
• eapmd5pass project eapmd5pass An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:211 was found in... CVE-2017-11669 7.5 HighJuly 31, 2017
• eapmd5pass project eapmd5pass An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:134 was found in... CVE-2017-11668 7.5 HighJuly 31, 2017
• imagemagick Ubuntu imagemagick regression USN-3363-2 Fix available No scoreJuly 31, 2017
• actian pervasive psql, zen +1 more Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to... CVE-2017-11757 9.8 CriticalJuly 31, 2017
• medhost connex MEDHOST Connex contains a hard-coded Mirth Connect admin credential that is used for customer... CVE-2017-11743 9.8 CriticalJuly 31, 2017
• libid3tag project libid3tag The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a... CVE-2017-11551 Fix available 5.5 MediumJuly 31, 2017
• libid3tag project libid3tag The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a... CVE-2017-11550 Fix available 5.5 MediumJuly 31, 2017
• timidity\+\+ project timidity\+\+ The play_midi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a... CVE-2017-11549 5.5 MediumJuly 31, 2017
• xiph libao The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to... CVE-2017-11548 Public exploitFix available 5.5 MediumJuly 31, 2017
• timidity\+\+ project timidity\+\+ The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a... CVE-2017-11547 Fix available 5.5 MediumJuly 31, 2017
• timidity\+\+ project timidity\+\+ The insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to... CVE-2017-11546 Fix available 5.5 MediumJuly 31, 2017
• sound exchange project exchange, debian linux +1 more The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause... CVE-2017-11359 Public exploitFix available 5.5 MediumJuly 31, 2017
• xiph.org libvorbis The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote... CVE-2017-11333 Public exploitFix available 5.5 MediumJuly 31, 2017
• sound exchange project exchange, debian linux +1 more The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a... CVE-2017-11332 Public exploitFix available 5.5 MediumJuly 31, 2017
• xiph vorbis-tools The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to... CVE-2017-11331 Public exploitFix available 5.5 MediumJuly 31, 2017
• divfix divfix\+\+ The DivFixppCore::avi_header_fix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote... CVE-2017-11330 Public exploit 5.5 MediumJuly 31, 2017
• nosefart project nosefart The chk_mem_access function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows... CVE-2017-11119 5.5 MediumJuly 31, 2017
• openexif project openexif The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote... CVE-2017-11118 5.5 MediumJuly 31, 2017
• openexif project openexif The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote... CVE-2017-11117 5.5 MediumJuly 31, 2017
• openexif project openexif The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote... CVE-2017-11116 7.8 HighJuly 31, 2017
• openexif project openexif The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows... CVE-2017-11115 5.5 MediumJuly 31, 2017
• twibright links The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a... CVE-2017-11114 Fix available 5.5 MediumJuly 31, 2017
• spectrum tc8717t firmware The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a... CVE-2017-9522 7.5 HighJuly 31, 2017
• cisco dpc3939 firmware, dpc3939b firmware, dpc3941t firmware +1 more +3 more The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a... CVE-2017-9521 9.8 CriticalJuly 31, 2017
• comcast xfinity xr11-20 firmware, motorola mx011anm firmware +1 more The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity... CVE-2017-9498 5.5 MediumJuly 31, 2017
• cisco mx011anm firmware The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices... CVE-2017-9497 6.8 MediumJuly 31, 2017
• cisco mx011anm firmware The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices... CVE-2017-9496 6.8 MediumJuly 31, 2017
• motorola mx011anm firmware The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices... CVE-2017-9495 4.6 MediumJuly 31, 2017
• motorola mx011anm firmware The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices... CVE-2017-9494 5.3 MediumJuly 31, 2017
• cisco mx011anm firmware The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices... CVE-2017-9493 6.3 MediumJuly 31, 2017
• cisco dpc3939 firmware, dpc3939b firmware, dpc3941t firmware +1 more +3 more The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a... CVE-2017-9492 7.5 HighJuly 31, 2017
• Show olderLoading…