CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- ibm websphere message broker, integration bus +1 moreIBM WebSphere Message Broker stores user credentials in plain in clear text which can be read by...5.5 Medium
- ibm maximo asset managementIBM Maximo Asset Management 7.1, 7.5, and 7.6 could allow a local user to obtain sensitive...3.3 Low
- ibm maximo asset managementIBM Maximo Asset Management 7.1, 7.5, and 7.6 is vulnerable to SQL injection. A remote attacker...9.8 Critical
- ibm rational team concertIBM Rational Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm rational team concert, rational collaborative lifecycle management +1 moreIBM Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm rational team concert, rational collaborative lifecycle management +1 moreIBM Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm rational team concert, rational collaborative lifecycle management +1 moreIBM Team Concert 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- perforce puppet enterprise, puppet enterprise +1 moreVersions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 failed to mark MCollective server...7.5 High
- ibm security guardiumIBM Security Guardium 10.0 and 10.1 is vulnerable to SQL injection. A remote attacker could send...9.8 Critical
- ibm security guardiumIBM Security Guardium 10.0 and 10.1 does not perform an authentication check for a critical...6.5 Medium
- ibm security guardiumIBM Security Guardium 10.0, 10.1 is vulnerable to cross-site scripting. This vulnerability allows...6.1 Medium
- ibm websphere portalIBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows...6.1 Medium
- ibm security guardiumIBM Security Guardium 9.0, 9.1, 9.5, 10.0, and 10.1 transmits sensitive data in cleartext in the...3.7 Low
- radare radare2The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to...7.8 High
- xenXen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows...6.5 Medium
- xenThe grant-table feature in Xen through 4.8.x mishandles MMIO region grant references, which...7.5 High
- xenThe grant-table feature in Xen through 4.8.x does not ensure sufficient type counts for a...10.0 Critical
- xenThe grant-table feature in Xen through 4.8.x mishandles a GNTMAP_device_map and GNTMAP_host_map...10.0 Critical
- xenXen through 4.8.x mishandles virtual interrupt injection, which allows guest OS users to cause a...6.5 Medium
- xenXen through 4.8.x does not validate memory allocations during certain P2M operations, which...10.0 Critical
- xenXen through 4.8.x does not validate the port numbers of polled event channel ports, which allows...9.1 Critical
- xenThe vCPU context-switch implementation in Xen through 4.8.x improperly interacts with the Memory...7.5 High
- xenThe shadow-paging feature in Xen through 4.8.x mismanages page references and consequently...9.0 Critical
- xenThe grant-table feature in Xen through 4.8.x has a race condition leading to a double free, which...8.1 High
- xenThe grant-table feature in Xen through 4.8.x provides false mapping information in certain cases...9.8 Critical
- xenXen through 4.8.x mishandles page transfer, which allows guest OS users to obtain privileged host...10.0 Critical
- imagemagickIn ImageMagick 7.0.6-0, a heap-based buffer over-read in the GetNextToken function in token.c...8.8 High
- ipsec-toolsThe racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity...7.5 High
- topdeskThere is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.6.1 Medium
- odooIn Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0,...8.8 High
- odooIn Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0,...9.8 Critical
- odooIn Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0,...6.5 Medium
- jabberd2JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even...9.8 Critical
- qemuBuffer overflow in the "megasas_mmio_write" function in Qemu 2.9.0 allows remote attackers to...9.8 Critical
- qemuQuick Emulator (Qemu) built with the VirtFS, host directory sharing via Plan 9 File System (9pfs)...9.0 Critical
ffmpeg2SUSESecurity update for ffmpegNo score- webminMultiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers...6.1 Medium
- humaxdigital hg100r firmwareAn issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root...9.8 Critical
- humaxdigital hg100r firmwareAn issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page.6.1 Medium
- humaxdigital hg100r firmwareAn issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's...9.8 Critical
- mozilla firefoxIf a server sends two Strict-Transport-Security (STS) headers for a single connection, they will...5.3 Medium
- cisco prime infrastructureA vulnerability in the web framework code of Cisco Prime Infrastructure could allow an...6.1 Medium
- cisco prime infrastructureA vulnerability in the web framework code of Cisco Prime Infrastructure could allow an...6.1 Medium
- cisco unified contact center expressA vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified...6.1 Medium
- cisco wide area application servicesA vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area...5.3 Medium
- cisco ios xrA vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker...6.7 Medium
- cisco ios xrA vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker...6.7 Medium
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in the web framework of Cisco Firepower Management Center could allow an...5.4 Medium
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in the web framework code of Cisco Firepower Management Center could allow an...5.4 Medium
- cisco firepower management center, secure firewall management center +1 moreA vulnerability in the web framework of Cisco Firepower Management Center could allow an...5.4 Medium
- Show moreLoading…