CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- finecmsdayrui FineCms 5.0.9 has SQL Injection via the num parameter in an action=related or action=tags...9.8 Critical
- finecmsdayrui FineCms 5.0.9 has Cross Site Scripting (XSS) in admin/Login.php via a payload in the...6.1 Medium
- fontforgeFontForge 20161012 is vulnerable to a buffer over-read in ValidatePostScriptFontName (parsettf.c)...7.8 High
- fontforgeFontForge 20161012 is vulnerable to a buffer over-read in umodenc (parsettf.c) resulting in DoS...7.8 High
- debian tordebian/tor.init in the Debian tor_0.2.9.11-1~deb9u1 package for Tor was designed to execute aa...7.5 High
- libsassThere is a stack consumption vulnerability in the Parser::advanceToNextToken function in parser...7.5 High
- libsassThere is an illegal address access in the Eval::operator function in eval.cpp in LibSass 3.4.5. A...7.5 High
- libsassThere is a stack consumption vulnerability in the lex function in parser.hpp (as used in sassc)...7.5 High
- exiv2There is an illegal address access in the extend_alias_table function in localealias.c of Exiv2 0...7.5 High
- imagemagickWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer...6.5 Medium
- imagemagickWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the...6.5 Medium
- imagemagickWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the...6.5 Medium
- imagemagickWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the...6.5 Medium
- imagemagickWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the...6.5 Medium
- imagemagickWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the...6.5 Medium
- imagemagickWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the...6.5 Medium
bind9Debianbind9 - regression updateNo score- exiv2, canonical ubuntu linux, debian linux +2 moreThere is a Floating point exception in the Exiv2::ValueType function in Exiv2 0.26 that will lead...7.5 High
- fontforgeFontForge 20161012 is vulnerable to a buffer over-read in getsid (parsettf.c) resulting in DoS or...7.8 High
- fontforgeFontForge 20161012 does not ensure a positive size in a weight vector memcpy call in...5.5 Medium
- fontforgeFontForge 20161012 is vulnerable to a buffer over-read in strnmatch (char.c) resulting in DoS or...7.8 High
- fontforgeFontForge 20161012 is vulnerable to a heap-based buffer overflow in readcffset (parsettf.c)...7.8 High
- fontforgeFontForge 20161012 is vulnerable to a heap-based buffer over-read in readcfftopdicts (parsettf.c)...7.8 High
- fontforgeFontForge 20161012 is vulnerable to a stack-based buffer overflow in addnibble (parsettf.c)...7.8 High
- fontforgeFontForge 20161012 is vulnerable to a heap-based buffer over-read in readttfcopyrights (parsettf...7.8 High
- fontforgeFontForge 20161012 is vulnerable to a heap-based buffer over-read in PSCharStringToSplines ...7.8 High
- fortinet fortiwlm, fortinet, inc. fortinet fortiwlm +1 moreA hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a...9.8 Critical
- imagemagickThe ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1...6.5 Medium
- imagemagickThe WriteOnePNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0...6.5 Medium
- inmarsat amosconnectHard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative...9.8 Critical
- inmarsat amosconnect, amosconnect 8 +1 moreBlind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user...9.8 Critical
- resiprocate, debian linux +1 moreThe SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1...7.5 High
- atutorDirectory Traversal exists in ATutor before 2.2.2 via the icon parameter to /mods/_core/courses...7.5 High
- sony corporation wg-c10, sony wg-c10 firmware +1 moreWG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter...9.1 Critical
- sony corporation wg-c10, sony wg-c10 firmware +1 moreBuffer overflow in WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary commands...7.2 High
- sony corporation wg-c10, sony wg-c10 firmware +1 moreWG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary OS commands via unspecified...7.2 High
- buffalo wmr-433 firmware, wmr-433w firmware, buffalo inc. wmr-433 +1 more +3 moreCross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware...6.1 Medium
- buffalo wmr-433 firmware, wmr-433w firmware, buffalo inc. wmr-433 +1 more +3 moreCross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR...8.8 High
- buffalo wapm-1166d firmware, wapm-apg600h firmware, buffalo inc. wapm-1166d +1 more +3 moreWAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows...9.8 Critical
- tcpdumptcpdump 4.9.0 has a buffer overflow in the sliplink_print function in print-sl.c.9.8 Critical
- tcpdumptcpdump 4.9.0 has a heap-based buffer over-read in the pimv1_print function in print-pim.c.9.8 Critical
- tcpdumptcpdump 4.9.0 has a heap-based buffer over-read in the lldp_print function in print-lldp.c,...9.8 Critical
- imagemagickWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Floating Point...6.5 Medium
- imagemagickWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer...6.5 Medium
- imagemagickWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer...6.5 Medium
- red hat, inc. rubygem-safemode, safemode project safemode +1 moreSafemode Gem Has Incomplete List of Disallowed Inputs9.8 Critical
- cygwinCygwin versions 1.7.2 up to and including 1.8.0 are vulnerable to buffer overflow vulnerability...7.5 High
- red hat, inc. rkhunter, rootkit hunter project hunter +1 morerkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing...9.8 Critical
- tp-link archer c9 \(2.0\) firmwarepasswd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin...9.8 Critical
- ibm websphere application serverIBM WebSphere Application Server Proxy Server or On-demand-router (ODR) 7.0, 8.0, 8.5, 9.0 and...3.3 Low
- Show moreLoading…