CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- gnome evince, debian linux, redhat enterprise linux desktop +5 more +7 morebackend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1...7.8 High
- rack-cors project rack-cors, debian linux +1 moreMissing Regex anchor in Rack-Cors allows malicious third party site to perform CORS request8.8 High
- finecms project finecmsFineCMS through 2017-07-12 allows XSS in visitors.php because JavaScript in visited URLs is not...6.1 Medium
- finecms project finecmsapplication/core/controller/images.php in FineCMS through 2017-07-12 allows remote authenticated...5.4 Medium
- finecms project finecmsSQL Injection exists in FineCMS through 2017-07-12 via the application/core/controller/excludes...8.8 High
- finecms project finecmsCross-site scripting (XSS) vulnerability in /application/lib/ajax/get_image.php in FineCMS...6.1 Medium
- apache http server, apple mac os x, debian linux +12 more +14 moreIn Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-...9.1 Critical
- heimdal project heimdal, apple iphone os, mac os x +3 more +5 moreHeimdal before 7.4 allows remote attackers to impersonate services with Orpheus' Lyre attacks...8.1 High
- xoopsIn install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed...9.8 Critical
- pulsesecure pulse connect securePulse Connect Secure 8.3R1 has CSRF in logout.cgi. The logout function of the admin panel is not...8.8 High
- pulsesecure pulse connect securePulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi. The helpLaunchPage parameter is...6.1 Medium
- pulsesecure pulse connect securePulse Connect Secure 8.3R1 has Reflected XSS in adminservercacertdetails.cgi. In the admin panel,...6.1 Medium
- pulsesecure pulse connect securePulse Connect Secure 8.3R1 has CSRF in diag.cgi. In the panel, the diag.cgi file is responsible...8.8 High
- iceni infixAn out-of-bounds write vulnerability exists in the PDF parsing functionality of Infix 7.1.5. A...8.8 High
- freedesktop popplerAn exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler...7.5 High
- freedesktop popplerAn exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler...7.5 High
- ibm infosphere information server, infosphere information server on cloud +1 moreIBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting. This...6.1 Medium
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 9.0.1 and 9.0.2 could allow an authenticated user with authority to send a...6.5 Medium
- ibm emptoris sourcingIBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing...5.4 Medium
- ibm emptoris sourcingIBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This...5.4 Medium
- ibm emptoris sourcingIBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This...5.4 Medium
- ibm emptoris sourcingIBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing...6.1 Medium
- ibm emptoris sourcingIBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This...5.4 Medium
- ibm emptoris sourcingIBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting. This...5.4 Medium
- avg anti-virusAVG AntiVirus for MacOS with scan engine before 4668 might allow remote attackers to bypass...7.5 High
- sap netweaverdisp+work 7400.12.21.30308 in SAP NetWeaver 7.40 allows remote attackers to cause a denial of...7.5 High
- sap netweaverSAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly...7.5 High
- sap netweaver abapSAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a...2.7 Low
- rarzilla unrar-freeunrarlib.c in unrar-free 0.0.1, when _DEBUG_LOG mode is enabled, might allow remote attackers to...7.8 High
- rarzilla unrar-freeunrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a denial of service (NULL...6.5 Medium
- mcafee advanced threat defense (atd), advanced threat defense +1 morePrivilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3...8.8 High
- mcafee advanced threat defense (atd), advanced threat defense +1 moreExploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat...7.5 High
- mcafee advanced threat defense (atd), advanced threat defense +1 moreCommand Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10...8.8 High
- mcafee advanced threat defense (atd), advanced threat defense +1 moreCommand Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10...9.8 Critical
- mcafee advanced threat defense (atd), advanced threat defense +1 moreAuthentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense (ATD)...9.8 Critical
- phpmyfaqphpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in...9.8 Critical
- apache sparkModerate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.116.1 Medium
- finecms project finecmsFineCMS 2.1.0 allows remote attackers to execute arbitrary PHP code by using a URL Manager "Add...9.8 Critical
- ipsilon project ipsilonSession Fixation in ipsilon9.1 Critical
- thermofisher dt80 dex firmwaredataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and...9.8 Critical
- imagemagickThe ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability...7.5 High
- fairsketch rise ultimate project managerIn Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section....5.4 Medium
- fairsketch rise ultimate project managerIn Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section....5.4 Medium
- finecms project finecmsFineCMS through 2017-07-11 has stored XSS in the logging functionality, as demonstrated by an XSS...6.1 Medium
- finecms project finecmsFineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in...6.1 Medium
- finecms project finecmsIn FineCMS through 2017-07-11, application/core/controller/style.php allows remote attackers to...7.5 High
- microsoft exchange server, microsoft corporation exchange server 2010 sp3, exchange server 2013 sp3, exchange server 2013 cu16, and exchange server 2016 cu5. +1 moreMicrosoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and...6.1 Medium
- microsoft edge, microsoft corporation windows 10 gold, 1511, 1607, and 1703, and windows server 2016 +1 moreMicrosoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote...7.5 High
- microsoft internet explorer, microsoft corporation windows 7 sp1, windows server 2008 r2 sp1, windows 8.1 and windows rt 8.1, windows server 2012 and r2, windows 10 gold, 1511, 1607, and 1703, and windows server 2016 +1 moreInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows...7.5 High
- microsoft edge, microsoft corporation windows 10 1703 +1 moreMicrosoft Edge in Windows 10 1703 Microsoft Edge allows a remote code execution vulnerability in...7.5 High
- Show moreLoading…