CVEs published July 4, 2017
30 CVEs were published on July 4, 2017: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 30
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 30
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Cisco Prime Collaboration Provisioning Tool
- 4
- Cisco Firepower Management Center
- 3
- Cisco Prime Infrastructure and Evolved Programmable Network…
- 3
- Cisco Identity Services Engine
- 2
- Cisco IOS XR
- 2
- Cisco Prime Infrastructure
- 2
- Cisco SocialMiner
- 1
- Cisco StarOS for ASR 5000 Series Routers
- 1
- Cisco Unified Contact Center Express
- 1
- Cisco Wide Area Application Services
- 1
Medium, low and unrated 30
- CVE-2017-10810Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel through 4.11.8 allows…
- CVE-2017-10803In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the…
- CVE-2017-10804In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication…
- CVE-2017-10805In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in…
- CVE-2017-7276There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.
- CVE-2017-10807JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is…
- CVE-2017-7315An issue was discovered on Humax Digital HG100R 2.0.6 devices.
- CVE-2017-7316An issue was discovered on Humax Digital HG100R 2.0.6 devices.
- CVE-2017-7317An issue was discovered on Humax Digital HG100 2.0.6 devices.
- CVE-2017-9313Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML…
- CVE-2017-3865A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated, remote attacker…Cisco StarOS for ASR 5000 Series Routers
- CVE-2017-6605A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote…Cisco Identity Services Engine
- CVE-2017-6698A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow…Cisco Prime Infrastructure and Evolved Programmable Network…
- CVE-2017-6699A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM)…Cisco Prime Infrastructure and Evolved Programmable Network…
- CVE-2017-6700A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM)…Cisco Prime Infrastructure and Evolved Programmable Network…
- CVE-2017-6701A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote…Cisco Identity Services Engine
- CVE-2017-6702A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site…Cisco SocialMiner
- CVE-2017-6703A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker…Cisco Prime Collaboration Provisioning Tool
- CVE-2017-6704A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to…Cisco Prime Collaboration Provisioning Tool
- CVE-2017-6705A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to…Cisco Prime Collaboration Provisioning Tool
- CVE-2017-6706A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker…Cisco Prime Collaboration Provisioning Tool
- CVE-2017-6715A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a…Cisco Firepower Management Center
- CVE-2017-6716A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a…Cisco Firepower Management Center
- CVE-2017-6717A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a…Cisco Firepower Management Center
- CVE-2017-6718A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level.Cisco IOS XR
Show all 30 entriesShow fewer entries
- CVE-2017-6719A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host…Cisco IOS XR
- CVE-2017-6721A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could allow an…Cisco Wide Area Application Services
- CVE-2017-6722A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could…Cisco Unified Contact Center Express
- CVE-2017-6724A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a…Cisco Prime Infrastructure
- CVE-2017-6725A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a…Cisco Prime Infrastructure