CVEs published June 21, 2017
32 CVEs were published on June 21, 2017: 3 critical, 5 high. Browse them by severity, product and exploitation status.
- Published
- 32
- Critical
- 3
- High
- 5
- Medium
- 0
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Foscam Indoor IP Camera C1 Series
- 6
- Trihedral VTScada
- 3
- Cambium Networks ePMP
- 2
- Acronis True Image
- 1
- Ecava IntegraXor
- 1
- EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226,…
- 1
- EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125,…
- 1
- EMC Isilon OneFS 8.0.1.0, 8.0.0 8.0.0.3, 7.2.0 - 7.2.1.4, 7…
- 1
- Foscan Foscam C1 Webcam
- 1
- IBM Elastic Storage Server
- 1
Critical 3
- CVE-2016-8731Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12.Foscan Foscam C1 Webcam
- CVE-2017-2805An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera.Foscam Indoor IP Camera C1 Series
- CVE-2017-2831An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running…Foscam Indoor IP Camera C1 Series
High 5
- CVE-2017-2813An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44.Irfanview
- CVE-2017-2827An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running…Foscam Indoor IP Camera C1 Series
- CVE-2017-2828An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running…Foscam Indoor IP Camera C1 Series
- CVE-2017-2829An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running…Foscam Indoor IP Camera C1 Series
- CVE-2017-2830An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running…Foscam Indoor IP Camera C1 Series
Medium, low and unrated 24
- CVE-2016-7508Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a…
- CVE-2017-3218Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic.Samsung Magician
- CVE-2017-3219Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP.Acronis True Image
- CVE-2017-4988EMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege escalation vulnerability that could…EMC Isilon OneFS 8.0.1.0, 8.0.0 8.0.0.3, 7.2.0 - 7.2.1.4, 7…
- CVE-2017-4989In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may…EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226,…
- CVE-2017-4990In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload…EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125,…
- CVE-2017-9782JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted…
- CVE-2017-6043A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26.Trihedral VTScada
- CVE-2017-6045An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26.Trihedral VTScada
- CVE-2017-6050A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior.Ecava IntegraXor
- CVE-2017-6053A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26.Trihedral VTScada
- CVE-2017-7918An Improper Access Control issue was discovered in Cambium Networks ePMP.Cambium Networks ePMP
- CVE-2017-7922An Improper Privilege Management issue was discovered in Cambium Networks ePMP.Cambium Networks ePMP
- CVE-2017-1117IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a denial of service to the MQXR channel when trace is enabled.IBM MQ
- CVE-2017-1304IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS)…IBM Elastic Storage Server
- CVE-2017-9773Denial of Service was found in Horde_Image 2.x before 2.5.0 via a crafted URL to the "Null" image driver.
- CVE-2017-9774Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request.
- CVE-2017-9781A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to 1.4.0p6, allowing an unauthenticated remote…
- CVE-2017-9780In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for…
- CVE-2017-9129The wav_open_read function in frontend/input.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of…
- CVE-2017-9130The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of…
- CVE-2017-9766In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service (stack exhaustion)…
- CVE-2017-9771install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the database_username, database_host…
- CVE-2017-9778GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section.