CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- gnome gnome-sessionBad reference counting in the context of accept_ice_connection() in gsm-xsmp-server.c in old...5.5 Medium
- ismartalarm cubeone firmwareiSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze...7.5 High
- ismartalarm cubeone firmwareOn iSmartAlarm cube devices, there is Incorrect Access Control because a "new key" is transmitted...7.5 High
- ismartalarm cubeone firmwareOn iSmartAlarm cube devices, there is authentication bypass leading to remote execution of...9.8 Critical
- ismartalarm cubeone firmwareiSmartAlarm cube devices have an SSL Certificate Validation Vulnerability.7.5 High
- canonical ubuntu-imageubuntu-image 1.0 before 2017-07-07, when invoked as non-root, creates files in the resulting...5.9 Medium
- freedesktop libice, redhat enterprise linux desktop, enterprise linux server +3 more +5 moreIt was discovered that libICE before 1.0.9-8 used a weak entropy to generate keys. A local...5.2 Medium
- f5 nginx, apple xcode, puppet enterprise +2 moreNginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow...7.5 High
- red hat, inc. spicespice versions though 0.13 are vulnerable to out-of-bounds memory access when processing...8.8 High
- [unknown] undertow, debian linux, redhat jboss enterprise application platform +2 moreModerate severity vulnerability that affects io.undertow:undertow-core7.5 High
- [unknown] undertow, debian linux, redhat jboss enterprise application platform +2 moreUndertow-core vulnerable to HTTP Request Smuggling6.5 Medium
- debian linux, linux kernel +1 moreThe mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL...7.8 High
- imagemagickThe ReadTGAImage function in coders\tga.c in ImageMagick 7.0.5-6 has a memory leak vulnerability...8.8 High
- pcreIn PCRE 8.41, the OP_KETRMAX feature in the match function in pcre_exec.c allows stack exhaustion...7.5 High
- cloudfoundry cloud foundry, pivotal software cloud foundry cf, cloud foundry uaa +1 more +3 moreCloud Foundry UAA Identity Zone Admin Privilege Escalation6.6 Medium
- cisco firesight system softwareA vulnerability in the backup and restore functionality of Cisco FireSIGHT System Software could...6.7 Medium
- cisco identity services engineA vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE)...5.4 Medium
- cisco identity services engineA vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE...6.1 Medium
- cisco prime networkA vulnerability in the installation procedure for Cisco Prime Network Software could allow an...6.7 Medium
- cisco ios xrA vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco...7.5 High
- cisco wide area application servicesA vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central...5.3 Medium
- cisco asr 5000 softwareA vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS...7.5 High
- cisco ios xrA vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker...7.0 High
- cisco wide area application servicesA vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application...5.3 Medium
- cisco prime networkA vulnerability in the CLI of the Cisco Prime Network Gateway could allow an authenticated, local...5.5 Medium
- apache impalaDuring a routine security analysis, it was found that one of the ports in Apache Impala ...7.5 High
- apache impalaIt was noticed that a malicious process impersonating an Impala daemon in Apache Impala ...9.8 Critical
- nfsenNfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell...9.9 Critical
- apache traffic controlApache Traffic Control vulnerable to Slowloris-style Denial of Service attack7.5 High
- imagemagickThe ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability...6.5 Medium
- cactiCross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti 1.1.12 allows remote...5.4 Medium
- apache struts, struts 1 +1 moreCode execution in Apache Struts 1 plugin9.8 Critical
- ibm websphere commerce enterprise, websphere commerce +1 moreIBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could...6.1 Medium
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 9.0.1 and 9.0.2 Java/JMS application can incorrectly transmit user credentials...8.1 High
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 9.0.1 and 9.0.2 could allow a local user with ability to run or enable trace, to...4.7 Medium
- phpIn PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a...7.5 High
- graphicsmagickThe ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before...5.5 Medium
- graphicsmagick, debian linux +1 moreGraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders...9.8 Critical
- mpg123The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers...5.5 Medium
- xar project xarlibxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c.9.8 Critical
- xar project xarlibxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c.9.8 Critical
- php, netapp clustered data ontap +1 moreIn PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers...9.1 Critical
- phpIn PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's...7.5 High
- phpIn PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM...7.5 High
- phpIn PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be...7.5 High
- phpIn PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the...7.5 High
- emc data protection advisorEMC Data Protection Advisor prior to 6.4 contains a path traversal vulnerability. A remote...4.9 Medium
- emc data protection advisorEMC Data Protection Advisor prior to 6.4 contains multiple blind SQL injection vulnerabilities. A...8.8 High
- emc esrs policy managerEMC ESRS Policy Manager prior to 6.8 contains an undocumented account (OpenDS admin) with a...9.8 Critical
- imagemagickThe ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability...6.5 Medium
- Show moreLoading…