CVEs published in July 2017
1,338 vulnerabilities, 179 critical, 13 exploited.
- avira antivirusAvira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY...7.8 High
- mediacoderBuffer overflow in MediaCoder 0.8.48.5888 allows remote attackers to execute arbitrary code via a...7.8 High
- ffmpegThe ff_amf_get_field_value function in libavformat/rtmppkt.c in FFmpeg 3.3.2 allows remote RTMP...7.5 High
- d.r.commander libjpeg-turboThe fill_input_buffer function in jdatasrc.c in libjpeg-turbo 1.5.1 allows remote attackers to...8.8 High
- mpg123The next_text function in src/libmpg123/id3.c in mpg123 1.24.0 allows remote attackers to cause a...5.5 Medium
- lame project lameThe unpack_read_samples function in frontend/get_audio.c in LAME 3.99.5 allows remote attackers...5.5 Medium
- surina soundtouchThe TDStretchSSE::calcCrossCorr function in source/SoundTouch/sse_optimized.cpp in SoundTouch 1.9...5.5 Medium
- surina soundtouchThe TDStretch::acceptNewOverlapLength function in source/SoundTouch/TDStretch.cpp in SoundTouch 1...5.5 Medium
- surina soundtouchThe TDStretch::processSamples function in source/SoundTouch/TDStretch.cpp in SoundTouch 1.9.2...5.5 Medium
- cactiCross-site scripting (XSS) vulnerability in auth_profile.php in Cacti 1.1.13 allows remote...5.4 Medium
- zohocorp manageengine eventlog analyzerMultiple Persistent cross-site scripting (XSS) vulnerabilities in Event log parsing and Display...6.1 Medium
- zohocorp manageengine eventlog analyzerZoho ManageEngine Event Log Analyzer 11.4 and 11.5 allows remote attackers to obtain an...6.1 Medium
- zohocorp manageengine eventlog analyzerMultiple Reflective cross-site scripting (XSS) vulnerabilities in search and display of event...6.1 Medium
- libavThere is an illegal address access in the build_table function in libavcodec/bitstream.c of Libav...7.5 High
- hashtopolisStored Cross-site scripting vulnerability in Hashtopussy 0.4.0 allows remote attackers to inject...6.1 Medium
- project hashtopussy hashtopussyIncorrect Access Control vulnerability in Hashtopussy 0.4.0 allows remote authenticated users to...8.8 High
- project hashtopussy hashtopussyCross-Site Request Forgery (CSRF) exists in Hashtopussy 0.4.0, allowing an admin password change...8.8 High
- hashtopus project hashtopusCross-Site Request Forgery (CSRF) exists in Hashtopus 1.5g via the password parameter to admin...8.8 High
- hashtopus project hashtopusSQL injection vulnerability in Hashtopus 1.5g allows remote authenticated users to execute...8.8 High
- hashtopus project hashtopusCross-site scripting (XSS) vulnerability in Hashtopus 1.5g allows remote attackers to inject...6.1 Medium
- zen-cart zen cartAuthenticated RCE in Zen Cart 1.5.5e8.8 High
- acunetix web vulnerability scannerReporter.exe in Acunetix 8 allows remote attackers to cause a denial of service (application...5.5 Medium
- acunetix web vulnerability scannerReporter.exe in Acunetix 8 allows remote attackers to execute arbitrary code or cause a denial of...9.8 Critical
roundcubeDebianroundcube - regression updateNo score- freerdp, debian linux +1 moreAn exploitable denial of service vulnerability exists within the handling of challenge packets in...6.5 Medium
- freerdp, debian linux +1 moreAn exploitable denial of service vulnerability exists within the handling of challenge packets in...6.5 Medium
- freerdp, debian linux +1 moreAn exploitable denial of service vulnerability exists within the handling of security data in...6.5 Medium
- freerdp, debian linux +1 moreAn exploitable denial of service vulnerability exists within the reading of proprietary server...6.5 Medium
- freerdp, debian linux +1 moreAn exploitable code execution vulnerability exists in the RDP receive functionality of FreeRDP 2...8.8 High
- freerdp, debian linux +1 moreAn exploitable code execution vulnerability exists in the authentication functionality of FreeRDP...8.8 High
- exiv2, canonical ubuntu linux, debian linux +2 moreThere is a reachable assertion in the Internal::TiffReader::visitDirectory function in...6.5 Medium
- apache http serverA maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4...7.5 High
- gnu gccUnder certain circumstances, the ix86_expand_builtin function in i386.c in GNU Compiler...4.0 Medium
- openprojectOpenProject before 6.1.6 and 7.x before 7.0.3 mishandles session expiry, which allows remote...8.1 High
- artifex ghostscript ghostxpsThe xps_decode_font_char_imp function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21...7.8 High
- artifex ghostscript ghostxpsThe xps_select_font_encoding function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21...7.8 High
- artifex ghostscript ghostxpsThe xps_true_callback_glyph_name function in xps/xpsttf.c in Artifex Ghostscript GhostXPS 9.21...7.8 High
- artifex ghostscript ghostxpsThe xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows...7.8 High
- artifex ghostscript ghostxpsThe xps_load_sfnt_name function in xps/xpsfont.c in Artifex Ghostscript GhostXPS 9.21 allows...7.8 High
- kopano webappCross-site scripting (XSS) vulnerability in js/ViewerPanel.js in the file previewer plugin in...6.1 Medium
- intel lr1304spcfg1 bios, lr1304spcfg1r bios, nuc6i3syk bios +20 more +22 moreIncorrect check in Intel processors from 6th and 7th Generation Intel Core Processor Families,...9.0 Critical
- wp-rocketIn the WP Rocket plugin 2.9.3 for WordPress, the Local File Inclusion mitigation technique is to...7.5 High
- factorioA sandbox escape in the Lua interface in Wube Factorio before 0.15.31 allows remote game servers...8.6 High
- joomla joomla\!In Joomla! before 3.7.4, inadequate filtering of potentially malicious HTML tags leads to XSS...6.1 Medium
- sipcrack project sipcrackA memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a...7.5 High
- sipcrack project sipcrackAn out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic,...5.9 Medium
- waves maxxaudioWaves MaxxAudio, as installed on Dell laptops, adds a "WavesSysSvc" Windows service with File...7.0 High
- nexusphpNexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag.6.1 Medium
- imagemagickWhen ImageMagick 7.0.6-1 processes a crafted file in convert, it can lead to a Memory Leak in the...6.5 Medium
- graphicsmagickGraphicsMagick 1.3.26 has a heap overflow in the WriteCMYKImage() function in coders/cmyk.c when...9.8 Critical
- Show moreLoading…