CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- fiyo cmsFiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter.9.8 Critical
- fiyo cmsFiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/sys_article.php via $_POST['parent_id'...9.8 Critical
- fiyo cmsFiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/sys_comment.php via $_POST['comment'],...9.8 Critical
- fiyo cmsFiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/comment_status.php via ...9.8 Critical
- fiyo cmsFiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/controller/comment_status.php via ...9.8 Critical
- imagemagickThe ReadEPTImage function in coders/ept.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1...6.5 Medium
- imagemagickThe ReadMATImage function in coders/mat.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1...6.5 Medium
- imagemagickThe ReadDIBImage function in coders/dib.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1...6.5 Medium
- imagemagickThe ReadDPXImage function in coders/dpx.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1...6.5 Medium
- imagemagickThe ReadOneMNGImage function in coders/png.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1...6.5 Medium
- imagemagickThe ReadCINImage function in coders/cin.c in ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1...6.5 Medium
- imagemagickThe WriteBlob function in MagickCore/blob.c in ImageMagick before 6.9.8-10 and 7.x before 7.6.0-0...6.5 Medium
- imagemagickThe ReadOneJNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6...6.5 Medium
- imagemagickThe ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0...6.5 Medium
- imagemagick, debian linux +1 morecoders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers to cause a denial of service ...8.8 High
- imagemagickcoders/mpc.c in ImageMagick before 7.0.6-1 does not enable seekable streams and thus cannot...8.8 High
- imagemagickThe ReadJPEGImage function in coders/jpeg.c in ImageMagick before 7.0.6-1 allows remote attackers...6.5 Medium
- imagemagickThe ReadSCREENSHOTImage function in coders/screenshot.c in ImageMagick before 7.0.6-1 has memory...6.5 Medium
- libmspack project libmspackThe cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2...5.5 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via...4.9 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via...4.9 Medium
- graphicsmagickThe ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob...8.8 High
- joomla joomla\!Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead...6.1 Medium
- joomla joomla\!Improper cache invalidation in Joomla! CMS 1.7.3 through 3.7.2 leads to disclosure of form contents.7.5 High
- kaspersky anti-virus for linux serverIn Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8...6.1 Medium
- kaspersky anti-virus for linux serverThe reportId parameter of the getReportStatus action method can be abused in the web interface in...7.5 High
- kaspersky anti-virus for linux serverThe kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux...9.8 Critical
- kaspersky anti-virus for linux serverThere are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux...8.8 High
- alpinelinux alpine linuxA heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a...7.8 High
- alpinelinux alpine linuxA heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a...7.8 High
- blackcat-cms blackcat cmsCross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authenticated users to...5.4 Medium
- owncloudAn attacker is logged in as a normal user and can somehow make admin to delete shared folders in...6.5 Medium
- owncloudA logical error in ownCloud Server before 10.0.2 caused disclosure of valid share tokens for...5.3 Medium
- owncloudInadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2...5.4 Medium
- owncloudownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2...6.1 Medium
- netapp clustered data ontapNetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to...6.5 Medium
- cisco ios, ios software, intellishield universal product +2 moreThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0...8.8 High
- cisco ios, ios and ios xe software, ios xe +1 more +3 moreThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0...8.8 High
- cisco ios, ios xe software, ios and ios xe software +2 more +4 moreThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0...8.8 High
- cisco ios xe software, ios xe, intellishield universal product +2 moreThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0...8.8 High
- cisco ios, ios and ios xe software, ios xe +1 more +3 moreThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0...8.8 High
- cisco ios, ios and ios xe software, ios xe +1 more +3 moreThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0...8.8 High
- cisco ios xe software, ios, ios and ios xe software +1 more +3 moreThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0...8.8 High
- cisco ios, ios and ios xe software, ios xe +2 moreThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0...8.8 High
- cisco ios, ios and ios xe software, ios xe +1 more +3 moreThe Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0...8.8 High
- fujielectric v-serverAn issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption...7.3 High
- lenovo bios, lenovo group ltd. notebook bios +1 moreSome Lenovo brand notebook systems do not have write protections properly configured in the...6.7 Medium
- lenovo connect2In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when...4.8 Medium
- ffmpegInteger overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3...7.8 High
- boltcms boltBolt stored Cross-site Scripting (XSS)5.4 Medium
- Show moreLoading…