CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- cisco prime collaboration provisioningA vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could...5.1 Medium
- cisco prime collaboration provisioningA vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow...5.5 Medium
- cisco prime collaboration provisioningA vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could...6.5 Medium
- cisco prime collaboration provisioningA vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could...5.9 Medium
- cisco socialminerA vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote...6.1 Medium
- cisco identity services engineA vulnerability in the web application interface of the Cisco Identity Services Engine (ISE)...6.1 Medium
- cisco prime infrastructureA vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and...6.1 Medium
- cisco evolved programmable network manager, prime infrastructure +1 moreA vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and...6.1 Medium
- cisco prime infrastructureA vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager ...5.4 Medium
- cisco identity services engineA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...5.4 Medium
- cisco starosA vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could...5.8 Medium
- linux kernelThe make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11...6.5 Medium
- debian linux, linux kernel +1 moreMemory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c...7.5 High
- progress sitefinity, telerik ui for asp.net ajax, progress asp.net ajax and sitefinity +2 moreTelerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity...9.8 Critical
- newport xps-cx firmware, xps-qx firmware +1 moreAn Improper Authentication issue was discovered in Newport XPS-Cx and XPS-Qx. An attacker may...9.8 Critical
- teltonika rut900 firmware, rut905 firmware, rut950 firmware +1 more +3 moreThe management interface for the Teltonika RUT9XX routers (aka LuCI) with firmware 00.03.265 and...9.8 Critical
- ektron content management systemCross-site scripting (XSS) vulnerability in Ektron Content Management System (CMS) before 9.1.0...6.1 Medium
- netapp oncommand system managerNetApp OnCommand System Manager before 9.0 allows remote attackers to obtain sensitive...8.1 High
- netapp altavaultNetApp AltaVault 4.1 and earlier allows man-in-the-middle attackers to obtain sensitive...8.1 High
- netapp clustered data ontapNetApp Clustered Data ONTAP allows man-in-the-middle attackers to obtain sensitive information,...7.5 High
- netapp data ontapNetApp Data ONTAP 8.1 and 8.2, when operating in 7-Mode, allows man-in-the-middle attackers to...7.5 High
- objectplanet opinioIn ObjectPlanet Opinio before 7.6.4, there is XSS.6.1 Medium
- graphicsmagickWhen GraphicsMagick 1.3.25 processes a MATLAB image in coders/mat.c, it can lead to a denial of...5.5 Medium
- graphicsmagickWhen GraphicsMagick 1.3.25 processes a DPX image (with metadata indicating a large width) in...5.5 Medium
- tp-link nc250 firmwareOn TP-Link NC250 devices with firmware through 1.2.1 build 170515, anyone can view video and...6.5 Medium
- graphicsmagickWhen GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single...5.5 Medium
- aeroadminAeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates. An attacker can...8.1 High
- aeroadminAeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied...7.5 High
- linux kernelThe NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type...7.5 High
- torproject torTor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not...7.5 High
- intelliants subrionSubrion Cross-site scripting (XSS) vulnerability6.1 Medium
- antiy antivirus engineWhen Antiy Antivirus Engine before 5.0.0.05171547 scans a special ZIP archive, it crashes with a...6.2 Medium
serialcrates.io`serial` crate is unmaintainedNo score- gnu psppThere is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU...6.5 Medium
- gnu psppThere is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0...6.5 Medium
- dbd-mysql project dbd-mysqlThe DBD::mysql module through 4.043 for Perl uses the mysql_ssl=1 setting to mean that SSL is...5.9 Medium
- dbd-mysql project dbd-mysqlThe DBD::mysql module through 4.043 for Perl allows remote attackers to cause a denial of service...9.8 Critical
- gnu libtasn1The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer...7.5 High