CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- juniper junos, juniper networks junos os +1 moreJunos OS: SRX Series: Cluster configuration sync failures occur if the root user account is locked out5.3 Medium
- juniper junos, juniper networks junos os +1 moreJunos OS: Local XML Injection through CLI command can lead to privilege escalation7.0 High
- juniper junos, juniper networks junos os +1 moreJunos OS: buffer overflow vulnerability in Junos CLI7.0 High
- juniper junos, juniper networks junos os +1 moreJunos OS: Insufficient authentication for user login when a specific system configuration error occurs.9.8 Critical
- ibm tivoli monitoring, tivoli monitoring v6 +1 moreIBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to modify SQL...7.5 High
- ibm tivoli monitoring, tivoli monitoring v6 +1 moreIBM Tivoli Monitoring Portal v6 could allow a local (network adjacent) attacker to execute...7.5 High
- ibm tivoli monitoring, tivoli monitoring v6 +1 moreIBM Tivoli Monitoring Portal V6 client could allow a local attacker to gain elevated privileges...7.0 High
- x.org libxdmcp, redhat enterprise linux, enterprise linux desktop +4 more +6 moreIt was discovered that libXdmcp before 1.1.2 including used weak entropy to generate session keys...6.5 Medium
- cairographics cairo, opensuse leap +1 morecairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of...7.5 High
- adobe connectAdobe Connect versions 9.6.1 and earlier have a stored cross-site scripting vulnerability....6.1 Medium
- adobe connectAdobe Connect versions 9.6.1 and earlier have a reflected cross-site scripting vulnerability....6.1 Medium
- adobe connectAdobe Connect versions 9.6.1 and earlier have a clickjacking vulnerability. Successful...7.5 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption...6.5 Medium
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 26.0.0.131 and earlier have an exploitable memory corruption...8.8 High
- adobe flash player, flash player desktop runtime +1 moreAdobe Flash Player versions 26.0.0.131 and earlier have a security bypass vulnerability related...6.5 Medium
- virustotal yaraHeap buffer overflow in the yr_object_array_set_item() function in object.c in YARA 3.x allows a...5.5 Medium
- cobiansoft cobian backupCobian Backup 11 client allows man-in-the-middle attackers to add and execute new backup tasks...8.1 High
- openmpt libopenmpt, openmpt +1 moresoundlib/Load_psm.cpp in OpenMPT through 1.26.12.00 and libopenmpt before 0.2.8461-beta26 has a...7.8 High
- jenkinsExposure of Sensitive Information to an Unauthorized Actor in Jenkins9.8 Critical
- onosproject onosLinux foundation ONOS 1.9.0 is vulnerable to unauthenticated upload of applications (.oar)...9.8 Critical
- onosproject onosLinux foundation ONOS 1.9.0 allows unauthenticated use of websockets.7.5 High
- onosproject onosLinux foundation ONOS 1.9.0 is vulnerable to a DoS.7.5 High
- onosproject onosLinux foundation ONOS 1.9 is vulnerable to XSS in the device. registration6.1 Medium
- creolabs gravityCreolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function9.8 Critical
- creolabs gravityCreolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function.9.8 Critical
- creolabs gravityCreolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that...9.8 Critical
- creolabs gravityCreolabs Gravity version 1.0 is vulnerable to a Double Free in gravity_value resulting...9.8 Critical
- apereo phpcasJasig phpCAS version 1.3.4 is vulnerable to an authentication bypass in the validateCAS20...8.1 High
- oauth2 proxy project proxyOpen Redirect in oauth2_proxy6.1 Medium
- oauth2 proxy project proxyCross-site Request Forgery (CSRF)8.8 High
- betterment testtrackTestTrack Server versions 1.0 and earlier are vulnerable to an authentication flaw in the split...7.5 High
- modx revolutionMODX Revolution blind SQL injection8.8 High
- keepassThe entry details view function in KeePass version 1.32 inadvertently decrypts certain database...7.5 High
- openmediavaultMultiple Cross-site scripting (XSS) vulnerabilities in rpc.php in OpenMediaVault release 2.1 in...6.1 Medium
- kitto project kittokittoframework kitto version 0.5.1 is vulnerable to memory exhaustion in the router resulting in DoS7.5 High
- kitto project kittokittoframework kitto version 0.5.1 is vulnerable to an XSS in the 404 page resulting in...6.1 Medium
- kitto project kittokittoframework kitto 0.5.1 is vulnerable to directory traversal in the router resulting in remote...7.5 High
- xmlsec project xmlsecxmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted...7.1 High
- eyesofnetworkEyesOfNetwork (EON) 5.1 Unauthenticated SQL Injection in eonweb leading to remote root9.8 Critical
- livehelperchat live helper chatLive Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header...6.1 Medium
- cheveretoStored XSS vulnerabilities in chevereto CMS before version 3.8.11, one in the user profile and...6.1 Medium
- kubernetesKubernetes Privilege Escalation9.8 Critical
- rocketchat rocket.chatRocket.Chat version 0.8.0 and newer is vulnerable to XSS in the markdown link parsing code for...6.1 Medium
- plug project plugArbitrary Code Execution in Cookie Serialization8.1 High
- plug project plugNull Byte Injection in Plug.Static7.8 High
- xwiki cryptpadCross-site scripting (XSS) vulnerability in pad export in XWiki labs CryptPad before 1.1.1 allows...6.1 Medium
- jasper project jasper, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreJasPer 2.0.12 is vulnerable to a NULL pointer exception in the function jp2_encode which failed...7.5 High
- qs project qsPrototype Pollution Protection Bypass in qs7.5 High
- rbenv project rbenvrbenv (all current versions) is vulnerable to Directory Traversal in the specification of Ruby...9.8 Critical
- mauticSensitive Cookie Without HttpOnly and Secure Flag7.5 High
- Show moreLoading…