CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- ipa casl ii simulator, information-technology promotion agency, japan (ipa) installer of casl ii simulator(self-extract format) +1 moreUntrusted search path vulnerability in Installer of CASL II simulator (self-extract format)...7.8 High
- apple installer of quicktime for windows, quicktime +1 moreUntrusted search path vulnerability in Installer of QuickTime for Windows allows an attacker to...7.8 High
- w3 eden, inc. wordpress download manager, w3eden download manager +1 moreOpen redirect vulnerability in WordPress Download Manager prior to version 2.9.51 allows remote...6.1 Medium
- w3 eden, inc. wordpress download manager, w3eden download manager +1 moreCross-site scripting vulnerability in WordPress Download Manager prior to version 2.9.50 allows...6.1 Medium
- e-tax.nta e-tax, national tax agency installer of "setup file of advance preparation" (jizen setup.exe) +1 moreUntrusted search path vulnerability in Installer of "Setup file of advance preparation" ...7.8 High
- acquisition, technology & logistics agency installer of electronic tendering and bid opening system, acquisition technology and logistics agency installer of electronic tendering +1 moreUntrusted search path vulnerability in Installer of Electronic tendering and bid opening system...7.8 High
- information-technology promotion agency, japan (ipa) source code security studying tool icodechecker, ipa icodechecker +1 moreCross-site scripting vulnerability in Source code security studying tool iCodeChecker allows an...6.1 Medium
- maff denshinouhin check system, ministry of agreculture, foresty and fishery installer of denshinouhin check system (for ministry of agriculture, forestry and fisheries nouson seibi jigyou) 2014 march edition +1 moreUntrusted search path vulnerability in Installer of Denshinouhin Check System (for Ministry of...7.8 High
- kddi corporation home spot cube2, kddi home spot cube 2 firmware +1 moreHOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load...8.8 High
- kddi corporation home spot cube2, kddi home spot cube 2 firmware +1 moreHOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS...8.8 High
- kddi corporation home spot cube2, kddi home spot cube 2 firmware +1 moreBuffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute...8.8 High
- kddi corporation home spot cube2, kddi home spot cube 2 firmware +1 moreHOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS...8.0 High
- cybozu kunai, cybozu, inc. cybozu kunai for android +1 moreCross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote...6.1 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to...4.8 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreSession fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform...5.4 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a...5.4 Medium
- dlink dir-615The D-Link DIR-615 device before v20.12PTb04 doesn't use SSL for any of the authenticated pages....9.8 Critical
- dlink dir-615On the D-Link DIR-615 before v20.12PTb04, once authenticated, this device identifies the user...9.8 Critical
- dlink dir-615On the D-Link DIR-615 before v20.12PTb04, if a victim logged in to the Router's Web Interface...8.8 High
- gonitro nitro proNitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service (application...5.5 Medium
- yawsYaws 1.91 allows Unauthenticated Remote File Disclosure via HTTP Directory Traversal with /%5C../...7.5 High
- finecms project finecmsIn FineCMS through 2017-07-07, application\core\controller\template.php allows remote PHP code...9.8 Critical
clispMageia,ffcallMageia +1 moreUpdated ffcall,clisp packages fix security vulnerabilityNo score- emc rsa archer egrcEMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an open...6.1 Medium
- emc rsa archer egrcEMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information...4.3 Medium
- emc rsa archer egrcEMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an information...4.3 Medium
- emc rsa archer egrcEMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is affected by an...6.5 Medium
- emc rsa archer egrcEMC RSA Archer 5.4.1.3, 5.5.3.1, 5.5.2.3, 5.5.2, 5.5.1.3.1, 5.5.1.1 is potentially affected by a...8.8 High
- freedesktop popplerAn exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality...8.8 High
- imagemagickThe mng_get_long function in coders/png.c in ImageMagick 7.0.6-0 allows remote attackers to cause...5.5 Medium
- sqliteThe getNodeSize function in ext/rtree/rtree.c in SQLite through 3.19.3, as used in GDAL and other...9.8 Critical
- irssiAn issue was discovered in Irssi before 1.0.4. While updating the internal nick list, Irssi could...9.8 Critical
- irssiAn issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps,...9.8 Critical
- google androidAn elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious...7.0 High
- google androidAn elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious...7.8 High
- google androidA elevation of privilege vulnerability in the MediaTek networking driver. Product: Android....7.8 High
- google androidA elevation of privilege vulnerability in the Upstream Linux tcb. Product: Android. Versions:...7.8 High
- google androidA information disclosure vulnerability in the HTC sensor hub driver. Product: Android. Versions:...3.3 Low
- google androidA information disclosure vulnerability in the HTC sound driver. Product: Android. Versions:...5.5 Medium
- google androidA elevation of privilege vulnerability in the HTC led driver. Product: Android. Versions: Android...7.8 High
- google androidA elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions:...6.8 Medium
- google androidA elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions:...6.8 Medium
- google androidA elevation of privilege vulnerability in the Android system ui. Product: Android. Versions: 7.1...7.8 High
- google androidA elevation of privilege vulnerability in the Android system ui. Product: Android. Versions: 4.4...7.8 High
- google androidA remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1...7.8 High
- google androidA remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1...7.8 High
- google androidA remote code execution vulnerability in the Android system ui. Product: Android. Versions: 7.1.1...7.8 High
- google androidA information disclosure vulnerability in the Android media framework. Product: Android. Versions...5.5 Medium
- google androidA information disclosure vulnerability in the Android media framework. Product: Android. Versions...5.5 Medium
- google androidA denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4...5.5 Medium
- Show moreLoading…