CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- imagemagickThe ReadPESImage function in coders\pes.c in ImageMagick 7.0.6-1 has an infinite loop...6.5 Medium
- intelliants subrion cmsSubrion CMS before 4.1.6 has a SQL injection vulnerability in /front/actions.php via the $_POST...9.8 Critical
- intelliants subrion cmsSubrion CMS before 4.1.5.10 has a SQL injection vulnerability in /front/search.php via the $_GET...9.8 Critical
- cpanel whmThe WHM Upload Locale interface in cPanel before 56.0.51, 58.x before 58.0.52, 60.x before 60.0...5.4 Medium
- sitecore cmsIn Sitecore 8.2, there is absolute path traversal via the shell/Applications/Layouts/IDE.aspx fi...4.9 Medium
- sitecore cmsIn Sitecore 8.2, there is reflected XSS in the shell/Applications/Tools/Run Program parameter.5.4 Medium
- dlink dir-615D-Link DIR-615 before v20.12PTb04 has a second admin account with a 0x1 BACKDOOR value, which...9.8 Critical
- humaxdigital hg100r firmwareThe Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability...9.8 Critical
- phpsocialphpSocial (formerly phpDolphin) before 3.0.1 has XSS in the PATH_INFO to the search/tag/ URI.6.1 Medium
- google news and weatherThe Google News and Weather application before 3.3.1 for Android allows remote attackers to read...7.5 High
unattended-upgradesDebianunattended-upgrades - regression updateNo score- oracle mysql, oracle corporation mysql server, debian linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....3.1 Low
- oracle mysql, oracle corporation mysql server, debian linux +2 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....4.2 Medium
- oracle mysql, oracle corporation mysql server, debian linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump)....4.3 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: C API). Supported...3.7 Low
- oracle mysqlVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....4.4 Medium
- oracle mysql, oracle corporation mysql server, debian linux +2 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets)....4.4 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....4.4 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....4.9 Medium
- oracle mysql, oracle corporation mysql server, debian linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....4.9 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: X Plugin). Supported...5.3 Medium
- oracle mysql, oracle corporation mysql server, debian linux +8 more +10 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs)....5.3 Medium
- oracle mysql, debian linux, oracle mysql connector\/c +1 more +3 moreVulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/C)....5.3 Medium
- oracle mysqlVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....6.5 Medium
- oracle mysql, oracle corporation mysql server, oracle communications policy management +2 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached)....6.5 Medium
- oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: UDF)....5.3 Medium
- wiresharkIn Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or...7.5 High
- wiresharkIn Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop. This was...7.5 High
- wiresharkIn Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash. This was...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash. This was addressed...7.5 High
- wireshark, debian linux +1 moreIn Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite...7.5 High
- gnome-exe-thumbnailer project gnome-exe-thumbnailergnome-exe-thumbnailer before 0.9.5 is prone to a VBScript Injection when generating thumbnails...7.8 High
- biscom secure file transferBiscom Secure File Transfer is vulnerable to cross-site scripting in the File Name field. An...5.4 Medium
- biscom secure file transferBiscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name...4.3 Medium
- apport project apportAn issue was discovered in Apport through 2.20.x. In apport/report.py, Apport sets the...7.8 High
- barracuda load balancer adc firmwareA remote command injection vulnerability exists in the Barracuda Load Balancer product line ...8.8 High
- vanderbilt redcapREDCap before 7.5.1 has XSS via the query string.6.1 Medium
- vanderbilt redcapREDCap before 7.5.1 has CSRF in the deletion feature of the File Repository and File Upload...8.8 High
- ibm mq applianceIBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute...8.8 High
- asuswrt-merlin project rt-ac1200 firmware, rt-ac3100 firmware, rt-ac3200 firmware +25 more +27 moreStack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS...9.8 Critical
- fiyo cmsFiyo CMS 2.0.7 has SQL injection in /apps/app_article/controller/editor.php via $_POST['id'] and ...9.8 Critical
- fiyo cmsFiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_list.php via $_GET[...9.8 Critical
- fiyo cmsFiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_status.php via ...9.8 Critical
- Show moreLoading…