# CVEs published 2017-06-22

19 CVEs were published on June 22, 2017: 0 critical, 2 high. Days are UTC.

- [CVE-2017-0897](https://cve.now/CVE-2017-0897.md): ExpressionEngine version 2.x \< 2.11.8 and version 3.x \< 3.5.5 create an object signing token with weak entropy. (no CVSS, EllisLab ExpressionEngine)
- [CVE-2017-2780](https://cve.now/CVE-2017-2780.md): An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. (CVSS 8.1, Inside Secure MatrixSSL)
- [CVE-2017-2781](https://cve.now/CVE-2017-2781.md): An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. (CVSS 8.1, Inside Secure MatrixSSL)
- [CVE-2017-2782](https://cve.now/CVE-2017-2782.md): An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. (CVSS 6.5)
- [CVE-2017-9775](https://cve.now/CVE-2017-9775.md): Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2017-9776](https://cve.now/CVE-2017-9776.md): Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a… (no CVSS)
- [CVE-2015-9098](https://cve.now/CVE-2015-9098.md): In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Monitor, resulting in… (no CVSS)
- [CVE-2016-9747](https://cve.now/CVE-2016-9747.md): IBM RELM 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Rational Engineering Lifecycle Manager)
- [CVE-2016-9982](https://cve.now/CVE-2016-9982.md): IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists… (no CVSS, IBM Sterling B2B Integrator)
- [CVE-2016-9983](https://cve.now/CVE-2016-9983.md): IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should… (no CVSS, IBM Sterling B2B Integrator)
- [CVE-2017-1326](https://cve.now/CVE-2017-1326.md): IBM Sterling File Gateway does not properly restrict user requests based on permission level. (no CVSS, IBM Sterling B2B Integrator)
- [CVE-2017-9424](https://cve.now/CVE-2017-9424.md): IdeaBlade Breeze Breeze.Server.NET before 1.6.5 allows remote attackers to execute arbitrary code, related to use of TypeNameHandling in… (no CVSS)
- [CVE-2017-9815](https://cve.now/CVE-2017-9815.md): In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif\_dirread.c mishandles a malloc operation, which allows attackers… (no CVSS)
- [CVE-2017-0176](https://cve.now/CVE-2017-0176.md): A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a… (no CVSS, Microsoft Windows Server 2003 SP1, SP2 Windows XP - SP3)
- [CVE-2012-6706](https://cve.now/CVE-2012-6706.md): A VMSF\_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2… (no CVSS)
- [CVE-2017-3629](https://cve.now/CVE-2017-3629.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-3630](https://cve.now/CVE-2017-3630.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-3631](https://cve.now/CVE-2017-3631.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-9807](https://cve.now/CVE-2017-9807.md): An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-06-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.