CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- atmailCross-site scripting (XSS) vulnerability in atmail prior to version 7.8.0.2 allows remote...6.1 Medium
- medhost connexMEDHOST Connex contains hard-coded credentials that are used for customer database access. An...9.8 Critical
- appsec-labs appuseAppUse 4.0 allows shell command injection via a proxy field.7.8 High
- compulab intense pc firmwareIntense PC Phoenix SecureCore UEFI firmware does not perform capsule signature validation before...6.7 Medium
- mediawikiThe MWOAuthDataStore::lookup_token function in Extension:OAuth for MediaWiki 1.25.x before 1.25.3...9.8 Critical
- nodejs node.jsNode.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0,...7.5 High
- cloudfoundry capi-release, cf-release, dell emc cloud controller +2 moreAn issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release...7.5 High
- cloudfoundry capi-release, cf-release +1 moreAn issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release...7.8 High
bind9Debianbind9 - regression updateNo score- linux kernelThe brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211...7.8 High
- phpIn PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, a stack-based buffer overflow in...7.8 High
- qpdf project qpdfA stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to...5.5 Medium
- qpdf project qpdfA stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to...5.5 Medium
- qpdf project qpdfA stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to...5.5 Medium
- qpdf project qpdfA stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to...5.5 Medium
- qemu, debian linux +1 moreThe dhcp_decode function in slirp/bootp.c in QEMU (aka Quick Emulator) allows local guest OS...5.5 Medium
- qemu, debian linux, redhat enterprise linux desktop +7 more +9 moreqemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIPE, which allows remote attackers to...7.5 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 might create files using the default...7.1 High
- ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting....5.4 Medium
- ibm rational rhapsody design manager, rhapsody design manager +1 moreIBM Rhapsody DM 5.0 and 6.0 could allow a remote attacker to conduct phishing attacks, using an...5.4 Medium
- ibm rational rhapsody design manager, rhapsody design manager +1 moreIBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm rational software architect design manager, rational rhapsody design manager +1 moreIBM Rational Software Architect Design Manager 5.0 and 6.0 is vulnerable to cross-site scripting....5.4 Medium
- ibm rational rhapsody design manager, rhapsody design manager +1 moreIBM Rhapsody DM 5.0 and 6.0 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm emptoris supplier lifecycle management, emptoris strategic supply management +1 moreIBM Emptoris Supplier Lifecycle Management 10.1.0.x is vulnerable to cross-site scripting. This...5.4 Medium
- synology diskstation managerAn information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM)...5.3 Medium
- synology diskstation managerA design flaw in SYNO.API.Encryption in Synology DiskStation Manager (DSM) before 6.1.3-15152...7.5 High
- cloudfoundry capi-releaseAn issue was discovered in the Cloud Controller API in Cloud Foundry Foundation CAPI-release...7.8 High
- airlink101 skyipcam1620w wireless n mpeg4 3gpp firmwaresnwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware...8.8 High
- airlive bu-2015 firmware, bu-3026 firmware, md-3025 firmware +2 morecgi_test.cgi in AirLive BU-2015 with firmware 1.03.18, BU-3026 with firmware 1.43, and MD-3025...9.8 Critical
- appserverDirectory traversal vulnerability in the web request/response interface in Appserver before 1.0.3...7.5 High
- tilde cms project cmsAn issue was discovered in Tilde CMS 1.0.1. It is possible to retrieve sensitive data by using...6.5 Medium
- tilde cms project cmsAn issue was discovered in Tilde CMS 1.0.1. It is possible to bypass the implemented restrictions...7.5 High
- tilde cms project cmsAn issue was discovered in Tilde CMS 1.0.1. Arbitrary files can be read via a file=../ attack on...7.5 High
- tilde cms project cmsAn issue was discovered in Tilde CMS 1.0.1. Due to missing escaping of the backtick character, a...9.8 Critical
- simpleriskIn SimpleRisk 20170614-001, a CSRF attack on reset.php (aka the Send Password Reset Email form)...6.1 Medium
- libsassThere is a heap-based buffer over-read in the Sass::Prelexer::re_linebreak function in lexer.cpp...6.5 Medium
- statamicStatamic framework Incorrect Permission Assignment8.8 High
- libsassThere is a heap based buffer over-read in LibSass 3.4.5, related to address 0xb4803ea1. A crafted...6.5 Medium
- linux kernelnet/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled,...7.0 High
- loomioCross-site scripting (XSS) vulnerability in the Markdown parser in Loomio before 1.8.0 allows...5.4 Medium
- ooso markdown preview plusCross-site scripting (XSS) vulnerability in the Markdown Preview Plus extension before 0.5.7 for...6.1 Medium
- exiv2There is a Mismatched Memory Management Routines vulnerability in the Exiv2::FileIo::seek...7.5 High
- gnome libgxpsThere is a NULL pointer dereference in the caseless_hash function in gxps-archive.c in libgxps 0...7.5 High
- cisco residential gateway firmwareOn Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1...9.8 Critical
- cisco residential gateway firmwareOn Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1...9.8 Critical
- cisco residential gateway firmwareOn Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1...7.5 High
- finecmsdayrui FineCms 5.0.9 has URL Redirector Abuse via the url parameter in a sync action, related to...6.1 Medium
- finecmsdayrui FineCms 5.0.9 has remote PHP code execution via the param parameter in an action=cache...9.8 Critical
- finecmsdayrui FineCms 5.0.9 has SQL Injection via the field parameter in an action=module, action=member...9.8 Critical
- finecmsdayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to...9.8 Critical
- Show moreLoading…