CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- invisible-island ncursesIn ncurses 6.0, there is a NULL Pointer Dereference in the _nc_parse_entry function of tinfo...7.5 High
- invisible-island ncursesIn ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of...7.5 High
- fossies catdocThe ole_init function in ole.c in catdoc 0.95 allows remote attackers to cause a denial of...7.8 High
- vimVim 8.0 allows attackers to cause a denial of service (invalid free) or possibly have unspecified...7.8 High
- phpldapadmin project phpldapadmin, debian linux +1 morephpLDAPadmin through 1.2.3 has XSS in htdocs/entry_chooser.php via the form, element, rdn, or...6.1 Medium
- knot-dns knot dns, debian linux +1 moreKnot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol...5.9 Medium
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, preproc.c allows remote attackers to cause a denial of...7.8 High
- tcpdumptcpdump 4.9.0 allows remote attackers to cause a denial of service (heap-based buffer over-read...7.5 High
- redhat 3scale api management platformRed Hat 3scale (aka RH-3scale) API Management Platform (AMP) before 2.0.0 would permit creation...9.8 Critical
- elastic elasticsearch x-pack security, x-pack +1 moreElasticsearch X-Pack Security versions 5.0.0 to 5.4.3, when enabled, can result in the...6.5 Medium
- apache solrApache Solr insecure inter-node communication7.5 High
- graphicsmagickThe ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to...7.5 High
- swftoolsWhen SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer...8.8 High
- swftoolsWhen SWFTools 0.9.2 processes a crafted file in swfextract, it can lead to a NULL Pointer...8.8 High
- swftoolsWhen SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation...8.8 High
- swftoolsWhen SWFTools 0.9.2 processes a crafted file in png2swf, it can lead to a Segmentation Violation...8.8 High
- swftoolsWhen SWFTools 0.9.2 processes a crafted file in swfc, it can lead to a NULL Pointer Dereference...8.8 High
- swftoolsWhen SWFTools 0.9.2 processes a crafted file in swfcombine, it can lead to a NULL Pointer...8.8 High
- schneider-electric wonderware archestra loggerA Null Pointer Dereference issue was discovered in Schneider Electric Wonderware ArchestrA Logger...7.5 High
- schneider-electric wonderware archestra loggerA Stack-Based Buffer Overflow issue was discovered in Schneider Electric Wonderware ArchestrA...9.8 Critical
- schneider-electric wonderware archestra loggerAn Uncontrolled Resource Consumption issue was discovered in Schneider Electric Wonderware...8.6 High
- siemens simatic cp 44x-1 redundant network access modulesAn Improper Authentication issue was discovered in Siemens SIMATIC CP 44x-1 RNA, all versions...8.1 High
- systemd project systemdsystemd v233 and earlier fails to safely parse usernames starting with a numeric digit (e.g. ...9.8 Critical
- google androidDirectory traversal vulnerability in the doSendObjectInfo method in frameworks/av/media/mtp...4.6 Medium
- google androidRace condition in the bindBackupAgent method in the ActivityManagerService in Android 4.4.4...7.0 High
- foxitsoftware foxit reader, phantompdf +1 moreFoxit Reader before 8.3.1 and PhantomPDF before 8.3.1 have an Arbitrary Write vulnerability,...7.3 High
- etherpadDirectory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.1 through 1.5.2 allows...7.5 High
- wp-statistics wp statisticsThe WP Statistics plugin through 12.0.9 for WordPress has XSS in the rangestart and rangeend...6.1 Medium
- google androidAn elevation of privilege vulnerability in the NVIDIA Libnvparser component due to a memcpy into...7.8 High
- google androidAn information disclosure vulnerability in the NVIDIA Video Driver due to an out-of-bounds read...5.5 Medium
- getshortcodes shortcodes ultimateDirectory traversal vulnerability in Shortcodes Ultimate prior to version 4.10.0 allows remote...5.0 Medium
- brother mfc-j960dwn firmware, brother industries, ltd. mfc-j960dwn +1 moreCross-site request forgery (CSRF) vulnerability in MFC-J960DWN firmware ver.D and earlier allows...8.8 High
- dfactory responsive lightboxCross-site scripting vulnerability in Responsive Lightbox prior to version 1.7.2 allows an...6.1 Medium
- marpMarp versions v0.0.10 and earlier may allow an attacker to access local resources and files using...5.3 Medium
- toshiba hem-gw16a firmware, hem-gw26a firmware, toshiba lighting & technology corporation home gateway hem-gw16a +1 more +3 moreCross-site request forgery (CSRF) vulnerability in Toshiba Home gateway HEM-GW16A firmware HEM...8.8 High
- toshiba hem-gw16a firmware, hem-gw26a firmware, toshiba lighting & technology corporation home gateway hem-gw16a +1 more +3 moreToshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM...9.8 Critical
- toshiba hem-gw16a firmware, hem-gw26a firmware, toshiba lighting & technology corporation home gateway hem-gw16a +1 more +3 moreToshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM...9.8 Critical
- toshiba hem-gw16a firmware, hem-gw26a firmware, toshiba lighting & technology corporation home gateway hem-gw16a +1 more +3 moreToshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier. Toshiba Home gateway HEM...9.8 Critical
- toshiba hem-gw16a firmware, hem-gw26a firmware, toshiba lighting & technology corporation home gateway hem-gw16a +1 more +3 moreToshiba Home gateway HEM-GW16A firmware HEM-GW16A-FW-V1.2.0 and earlier, Toshiba Home gateway HEM...9.8 Critical
- moj pdf digital signature, the ministry of justice installer of pdf digital signature plugin +1 moreUntrusted search path vulnerability in Installer of PDF Digital Signature Plugin (G2.30) and...7.8 High
- moj shinseiyo sogo soft, the ministry of justice installer of shinseiyo sogo soft +1 moreUntrusted search path vulnerability in Installer of Shinseiyo Sogo Soft (4.8A) and earlier allows...7.8 High
- ministry of land, infrastructure, transport and tourism, japan the installer of mlit denshiseikabutsusakuseishienkensa system, the self-extracting archive including the installer of mlit denshiseikabutsusakuseishienkensa system, mlit denshiseikabutsusakuseishienkensa +2 moreUntrusted search path vulnerability in The installer of MLIT DenshiSeikabutsuSakuseiShienKensa...7.8 High
- national institute for land and infrastructure management douro kouji kanseizutou check program, nilim road construction completion diagram check program +1 moreUntrusted search path vulnerability in Douro Kouji Kanseizutou Check Program Ver3.1 ...7.8 High
- douroshisetu kihon data sakusei system, national institute for land and infrastructure management douroshisetu kihon data sakusei system +1 moreUntrusted search path vulnerability in Douroshisetu Kihon Data Sakusei System Ver1.0.2 and...7.8 High
- charamin omp, charamin steering committee the installer of charamin omp +1 moreUntrusted search path vulnerability in The installer of Charamin OMP Version 1.1.7.4 and earlier,...7.8 High
- national tax agency setup file of advance preparation for e-tax software (web version), nta e-tax +1 moreUntrusted search path vulnerability in Setup file of advance preparation for e-Tax software (WEB...7.8 High
- mext ebidsettingchecker, ministry of education, culture, sports, science and technology (mext) ebidsettingchecker.exe +1 moreUntrusted search path vulnerability in EbidSettingChecker.exe (version 1.0.0.0) allows an...9.8 Critical
- web-dorado event calendar wdCross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote...6.1 Medium
- i-o data device, inc. ts-ptcam, ts-ptcam/poe, ts-wlc2 +11 more +13 moreCross-site request forgery (CSRF) vulnerability in TS-WPTCAM, TS-PTCAM, TS-PTCAM/POE, TS-WLC2, TS...8.8 High
- butlerblog wp-membersCross-site scripting vulnerability in WP-Members prior to version 3.1.8 allows remote attackers...6.1 Medium
- Show moreLoading…