CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- graphicsmagickGraphicsMagick 1.3.26 has a NULL pointer dereference in the WriteMAPImage() function in coders...8.8 High
- graphicsmagickGraphicsMagick 1.3.26 has a Memory Leak in the PersistCache function in magick/pixel_cache.c...9.8 Critical
- graphicsmagickGraphicsMagick 1.3.26 has a segmentation violation in the WriteMAPImage() function in coders/map...8.8 High
- graphicsmagickGraphicsMagick 1.3.26 has a NULL pointer dereference in the WritePCLImage() function in coders...9.8 Critical
- graphicsmagickGraphicsMagick 1.3.26 has a heap overflow in the WriteRGBImage() function in coders/rgb.c when...9.8 Critical
- fiyo cmsdapur/app/app_user/controller/status.php in Fiyo CMS 2.0.7 has SQL injection via the id parameter.9.8 Critical
- fiyo cmsdapur\apps\app_config\controller\backuper.php in Fiyo CMS 2.0.7 allows remote attackers to delete...7.5 High
- finecmsdayrui FineCms through 5.0.10 has Cross Site Scripting (XSS) in controllers/api.php via the...6.1 Medium
- artifex ghostscript, debian linux +1 moreThe gs_alloc_ref_array function in psi/ialloc.c in Artifex Ghostscript 9.21 allows remote...7.8 High
- artifex ghostscript ghostxps, debian linux +1 moreThe Ins_JMPR function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote...7.8 High
- artifex ghostscript ghostxps, debian linux +1 moreThe gx_ttfReader__Read function in base/gxttfb.c in Artifex Ghostscript GhostXPS 9.21 allows...7.8 High
- artifex ghostscript ghostxps, debian linux +1 moreThe Ins_MDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote...7.8 High
- artifex ghostscript ghostxps, debian linux +1 moreThe Ins_IP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote...7.8 High
- artifex ghostscript, debian linux +1 moreThe Ins_MIRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote...7.8 High
- imagemagickWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to an address access...6.5 Medium
- imagemagickWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a heap-based buffer...6.5 Medium
- libtiffIn LibTIFF 4.0.8, there is a denial of service vulnerability in the TIFFOpen function. A crafted...6.5 Medium
cinnamon-settings-daemonMageiaUpdated cinnamon-settings-daemon packages fix security vulnerabilityNo score- ektron content management systemCross-site scripting (XSS) vulnerability in Ektron Content Management System before 9.1.0.184SP3...6.1 Medium
- cisco prime collaboration provisioningA vulnerability in the web portal of the Cisco Prime Collaboration Provisioning (PCP) Tool could...6.1 Medium
- cisco webex meetings, webex meetings server, webex event center +17 more +19 moreA vulnerability in Cisco WebEx browser extensions for Google Chrome and Mozilla Firefox could...8.8 High
- cisco web security appliance, web security virtual appliance +1 moreA vulnerability in the web proxy functionality of the Cisco Web Security Appliance (WSA) could...7.5 High
- cisco web security appliance, web security virtual appliance +1 moreA vulnerability in AsyncOS for the Cisco Web Security Appliance (WSA) could allow an...7.5 High
- cisco web security appliance, web security virtual appliance +1 moreA vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could...5.4 Medium
- cisco web security appliance, web security virtual appliance +1 moreA vulnerability in the CLI parser of the Cisco Web Security Appliance (WSA) could allow an...6.7 Medium
- cisco web security applianceA vulnerability in the web interface of the Cisco Web Security Appliance (WSA) could allow an...7.2 High
- cisco asr 5000 series softwareA vulnerability in certain filtering mechanisms of access control lists (ACLs) for Cisco ASR 5000...7.5 High
- cisco asr 5000 series softwareA vulnerability in the gateway GPRS support node (GGSN) of Cisco ASR 5000 Series Aggregation...8.6 High
- subsonicMultiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1...8.8 High
- netapp oncommand api servicesNetApp OnCommand API Services before 1.2P3 logs the LDAP BIND password when a user attempts to...6.5 Medium
- sap netweaver portalCross-site scripting (XSS) vulnerability in the DataArchivingService servlet in SAP NetWeaver...6.1 Medium
- sap trexSAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2)...9.8 Critical
- sap netweaver application server javaCross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS...6.1 Medium
- sap netweaver application server javaXML external entity (XXE) vulnerability in com.sap.km.cm.ice in SAP NetWeaver AS JAVA 7.5 allows...6.5 Medium
- zyxel pk5001z firmwareZyXEL PK5001Z devices have zyad5001 as the su password, which makes it easier for remote...8.8 High
- openpgpjsOpenPGP 1.2.0 and earlier decrypts arbitrary messages7.5 High
- hancom hangul word processorhwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a...7.8 High
- zenphotoThe sanitize_string function in ZenPhoto before 1.4.9 utilized the html_entity_decode function...6.1 Medium
- candlepinproject candlepinCandlepin allows remote attackers to obtain sensitive information by obtaining Java exception...6.5 Medium
- efrontlearning efrontThe file_manager component in eFront CMS before 3.6.15.5 allows remote authenticated users to...6.5 Medium
- efrontlearning efrontAbsolute path traversal vulnerability in the file_manager component of eFront CMS before 3.6.15.5...6.5 Medium
- tukaani xzscripts/xzgrep.in in xzgrep 5.2.x before 5.2.0, before 5.0.0 does not properly process file names...7.8 High
- nss compat ossl project compat osslThe cipherstring parsing code in nss_compat_ossl while in multi-keyword mode does not match the...9.8 Critical
- rsyslogrsyslog uses weak permissions for generating log files, which allows local users to obtain...5.5 Medium
- sos project sossosreport sensitive information disclosure via weak permissions of the generated archives5.5 Medium
- web-dorado contact form makerSQL injection vulnerability in Joomla! Component Contact Form Maker 1.0.1 allows remote attackers...9.8 Critical
- panda security antivirus pro 2015, global protection 2015, gold protection 2015 +1 more +3 moreHeap-based buffer overflow in Panda Security Kernel Memory Access Driver 1.0.0.13 allows...7.8 High
- freebsdThe inet module in FreeBSD 10.2x before 10.2-PRERELEASE, 10.2-BETA2-p2, 10.2-RC1-p1, 10.1x before...7.5 High
- shidax restaurant karaokeThe Restaurant Karaoke SHIDAX app 1.3.3 and earlier on Android does not verify SSL certificates,...5.9 Medium
- cisco cloud web securityCross-site scripting (XSS) vulnerability in the Alert Service of Cisco Cloud Web Security base...6.1 Medium
- Show moreLoading…