CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- boltcms boltBolt CMS Stored XSS5.4 Medium
- moodleMoodle Improper Privilege Management6.5 Medium
- moodleMoodle Information Disclosure4.3 Medium
- moodleMoodle User fullname disclosure on user preferences page6.5 Medium
- intenogroup inteno router firmwareInteno routers have a JUCI ACL misconfiguration that allows the "user" account to read files,...8.8 High
- freeradiusAn FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in...7.5 High
- freeradiusAn FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()...7.5 High
- freeradiusAn FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion...7.5 High
- freeradiusAn FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" -...9.8 Critical
- cloudfoundry capi-release, cf-release, cloud foundry +1 more +3 moreThe Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0,...6.6 Medium
- dell emc vipr srm, emc m\&r, emc storage monitoring and reporting +1 more +3 moreEMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to...9.8 Critical
- emc rsa authentication managerIn EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, a malicious user logged into the...5.9 Medium
- emc rsa identity governance and lifecycle, rsa identity management and governance, rsa via lifecycle and governance +2 moreThe EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG...5.4 Medium
- emc rsa identity governance and lifecycle, rsa identity management and governance, rsa via lifecycle and governance +2 moreThe EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance and RSA IMG...7.2 High
- emc rsa authentication managerIn EMC RSA Authentication Manager 8.2 SP1 and earlier, a malicious RSA Security Console...4.8 Medium
- shoco project shocoThe shoco_decompress function in the API in shoco through 2017-07-17 allows remote attackers to...7.5 High
- fiyo cmsFiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/app_article/sys_article.php via...9.8 Critical
- yadm project yadmyadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git...5.9 Medium
- No product listedExpat 2.2.3No score
- memcachedThe try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers...7.5 High
- phpIn PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not...9.8 Critical
- imagemagickThe ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF...6.5 Medium
- thermofisher dt8x firmwaredataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for...9.8 Critical
- octopus deploy, server +1 moreIn Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload...5.7 Medium
- freeradiusAn FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read...7.5 High
- freeradiusAn FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in...7.5 High
- freeradiusAn FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in fr_dhcp_decode()...7.5 High
- freeradiusAn FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decode_tlv()"...7.5 High
- freeradiusAn FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" -...9.8 Critical
- freeradius, debian linux, redhat enterprise linux desktop +5 more +7 moreAn FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write...7.5 High
- metinfoAuthenticated Code Execution Vulnerability in MetInfo 5.3.17 allows a remote authenticated...8.8 High
- zohocorp manageengine desktop centralZoho ManageEngine Desktop Central before build 100092 allows remote attackers to execute...9.8 Critical
- asuswrt-merlin project rt-ac1200 firmware, rt-ac3100 firmware, rt-ac3200 firmware +25 more +27 moreStack buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware...7.8 High
- asuswrt-merlin project rt-ac1200 firmware, rt-ac3100 firmware, rt-ac3200 firmware +25 more +27 moreGlobal buffer overflow in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS...7.8 High
- call-cc chickenDue to an incomplete fix for CVE-2012-6125, all versions of CHICKEN Scheme up to and including 4...7.5 High
- libsassThere is an illegal address access in ast.cpp of LibSass 3.4.5. A crafted input will lead to a...7.5 High
- libsassThere is a heap based buffer over-read in lexer.hpp of LibSass 3.4.5. A crafted input will lead...7.5 High
- exiv2There is a Segmentation fault in the XmpParser::terminate() function in Exiv2 0.26, related to an...6.5 Medium
- exiv2There is a heap-based buffer overflow in the Image::printIFDStructure function of image.cpp in...6.5 Medium
- exiv2There is an infinite loop in the Exiv2::Image::printIFDStructure function of image.cpp in Exiv2 0...6.5 Medium
- exiv2There is an invalid free in the Action::TaskFactory::cleanup function of actions.cpp in Exiv2 0...6.5 Medium
- exiv2There is a heap-based buffer over-read in the Image::printIFDStructure function in image.cpp in...6.5 Medium
- libtiffThere is a heap based buffer overflow in tools/tiff2pdf.c of LibTIFF 4.0.8 via a PlanarConfig...8.8 High
- apache wicketThe DiskFileItem class in Apache Wicket 6.x before 6.25.0 and 1.5.x before 1.5.17 allows remote...9.1 Critical
- redhat enterprise linuxThe mod_dontdothat component of the mod_dav_svn Apache module in Subversion as packaged in Red...6.5 Medium
- redhat satellitediscovery-debug in Foreman before 6.2 when the ssh service has been enabled on discovered nodes...7.0 High
- openldap openldap-servers/usr/libexec/openldap/generate-server-cert.sh in openldap-servers sets weak permissions for the...4.7 Medium
- teether authdauthd sets weak permissions for /etc/ident.key, which allows local users to obtain the key by...4.7 Medium
- theforeman foremanForeman after 1.1 and before 1.9.0-RC1 does not redirect HTTP requests to HTTPS when the...8.1 High
- Show moreLoading…