CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- gnome gtk-vncgtk-vnc 0.4.2 and older doesn't check framebuffer boundaries correctly when updating framebuffer...9.8 Critical
- mapbox mapbox.jsContent Injection via TileJSON Name in mapbox.js6.1 Medium
- mapbox project mapboxContent Injection via TileJSON attribute in mapbox.js6.1 Medium
- framasoft framadateFramadate version 1.0 is vulnerable to Formula Injection in the CSV Export resulting possible...9.8 Critical
- relevanssiWordPress plugin Relevanssi version 3.5.7.1 is vulnerable to stored XSS resulting in attacker...6.1 Medium
- rvm project rvmRVM automatically loads environment variables from files in $PWD resulting in command execution...9.8 Critical
- tt-rss tiny tiny rssTiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack6.1 Medium
- akkaAkka Java Serialization vulnerability8.1 High
- vospari forms project formsWordpress Plugin Vospari Forms version < 1.4 is vulnerable to a reflected cross site scripting in...6.1 Medium
- cactiCross-Site scripting (XSS) vulnerabilities in Cacti 0.8.8b allow remote attackers to inject...6.1 Medium
- cactiSQL injection vulnerability in graph_templates_inputs.php in Cacti 0.8.8b allows remote attackers...8.8 High
- oracle glassfish serverOracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Java Key Store...9.8 Critical
- oracle glassfish serverOracle, GlassFish Server Open Source Edition 3.0.1 (build 22) is vulnerable to Local File...7.5 High
- oracle glassfish serverOracle, GlassFish Server Open Source Edition 4.1 is vulnerable to both authenticated and...7.5 High
- koozali sme serverKoozali Foundation SME Server versions 8.x, 9.x, 10.x are vulnerable to an open URL redirect...6.1 Medium
- progress mixlib-archivemixlib-archive Path Traversal vulnerability7.5 High
- gnome epiphanyGNOME Web (Epiphany) 3.23 before 3.23.5, 3.22 before 3.22.6, 3.20 before 3.20.7, 3.18 before 3.18...7.5 High
- gnome shotwellShotwell version 0.24.4 or earlier and 0.25.3 or earlier is vulnerable to an information...7.5 High
- logicaldocLogicalDoc Community Edition 7.5.3 and prior is vulnerable to an XSS when using preview on HTML...5.4 Medium
- logicaldocLogicalDoc Community Edition 7.5.3 and prior contain an Incorrect access control which could...8.8 High
- logicaldocLogicalDoc Community Edition 7.5.3 and prior is vulnerable to XXE when indexing XML documents.8.8 High
- ecos embedded web serversSYN Flood or FIN Flood attack in ECos 1 and other versions embedded devices results in web...9.8 Critical
- phpmyadminphpMyAdmin DoS Vulnerability7.5 High
- phpmyadminphpMyAdmin SSRF in replication8.8 High
- phpmyadminphpMyAdmin Cookie attribute injection attack7.5 High
- phpmyadminphpMyAdmin CSS Injection Vulnerability6.1 Medium
- phpmyadminphpMyAdmin DoS Vulnerability7.5 High
- phpmyadminphpMyAdmin Open Redirect6.1 Medium
- mysqldumperMySQL Dumper version 1.24 is vulnerable to stored XSS when displaying the data in the database to...6.1 Medium
- mywebsqlMyWebSQL version 3.6 is vulnerable to stored XSS in the database manager component resulting in...6.1 Medium
- audacityteam audacityAudacity 2.1.2 through 2.3.2 is vulnerable to Dll HIjacking in the avformat-55.dll resulting...7.8 High
- akeneo product information managementAkeneo PIM vulnerable to shell injection in the mass edition9.8 Critical
- chyrp-lite project chyrp liteChyrp Lite version 2016.04 is vulnerable to a CSRF in the user settings function allowing...8.8 High
- twistedmatrix txawstxAWS AWSServiceEndpoint defaults to not verifying server certificates5.9 Medium
- plotly plotly.jsCross Site Scripting (XSS) in plotly.js6.1 Medium
- phpminiadmin project phpminiadminPHPMiniAdmin version 1.9.160630 is vulnerable to stored XSS in the name of databases, tables and...6.1 Medium
- atutorATutor version 2.2.1 and earlier are vulnerable to a SQL injection in the Assignment Dropbox,...9.8 Critical
- atutorATutor versions 2.2.1 and earlier are vulnerable to an incorrect access control check...9.8 Critical
- atutorATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension...9.8 Critical
- fedoraproject fedmsgFedMsg not properly completing message validation7.5 High
- imagemagickThe read_user_chunk_callback function in coders\png.c in ImageMagick 7.0.6-1 Q16 2017-06-21 (beta...8.8 High
- apache http serverWhen under stress, closing many connections, the HTTP/2 handling code in Apache httpd 2.4.26...7.5 High
- androidAn elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious...7.0 High
- apache strutsSpring AOP functionality (Struts) vulnerable to DoS attack7.5 High
- apache strutsApache Struts Improper Input Validation vulnerability5.9 Medium
- ibm daeja viewoneIBM Daeja ViewONE Professional, Standard & Virtual 4.1.5.1 and 5.0 could allow an authenticated...6.5 Medium
- hcl software bigfix inventory, ibm license metric tool +1 moreIBM BigFix Inventory v9 9.2 uses an inadequate account lockout setting that could allow a remote...9.8 Critical
- ibm emptoris strategic supply managementIBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to...5.4 Medium
- ibm emptoris strategic supply managementIBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to a...7.5 High
- ibm emptoris strategic supply managementIBM Emptoris Strategic Supply Management Platform 10.0.0.x through 10.1.1.x is vulnerable to...5.4 Medium
- Show moreLoading…