CVEs published May 19, 2017
30 CVEs were published on May 19, 2017: 0 critical, 0 high.
- Published
- 30
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 30
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- 3S-Smart Software Solutions GmbH CODESYS Web Server
- 2
- Geutebruck IP Cameras
- 2
- Phoenix Contact GmbH mGuard
- 2
- Apache Software Foundation Apache jUDDI · org.apache.juddi:…
- 1
- EMC Isilon OneFS OneFS 8.0.1.0, OneFS 8.0.0.0 8.0.0.2, OneF…
- 1
- EMC RSA Adaptive Authentication (On-Premise) RSA Adaptive A…
- 1
- LCDS Leao Consultoria e Desenvolvimento de Sistemas LTDA ME…
- 1
- Red Hat Cairo · cairo
- 1
- Red Hat JBoss
- 1
- Rockwell Automation Connected Components Workbench
- 1
Medium, low and unrated 30
- CVE-2017-7475Cairo version 1.15.4 is vulnerable to a NULL pointer dereference related to the FT_Load_Glyph and FT_Render_Glyph resulting in an applicatioRed Hat Cairo · cairo
- CVE-2017-7504HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss AppliRed Hat JBoss
- CVE-2015-5241After logging into the portal, the logout jsp page redirects the browser back to the login page after.Apache Software Foundation Apache jUDDI · org.apache.juddi:…
- CVE-2017-9093The my_skip_input_data_fn function in imagew-jpeg.c in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial o
- CVE-2017-9094The lzw_add_to_dict function in imagew-gif.c in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of servi
- CVE-2017-9098ImageMagick before 7.0.5-2 and GraphicsMagick before 1.3.24 use uninitialized memory in the RLE decoder, allowing an attacker to leak sensit
- CVE-2017-9090reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it possible to bypass the CAPTCHA via an empt
- CVE-2017-9091/admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1, which leads to CAPTCHA bypass by emptying $_P
- CVE-2017-9083poppler 0.54.0, as used in Evince and other products, has a NULL pointer dereference in the JPXStream::readUByte function in JPXStream.cc.
- CVE-2017-4978EMC RSA Adaptive Authentication (On-Premise) versions prior to 7.3 P2 (exclusive) contains a fix for a cross-site scripting vulnerability thEMC RSA Adaptive Authentication (On-Premise) RSA Adaptive A…
- CVE-2017-4979EMC Isilon OneFS 8.0.1.0, OneFS 8.0.0.0 - 8.0.0.2, OneFS 7.2.1.0 - 7.2.1.3, and OneFS 7.2.0.x is affected by an NFS export vulnerability.EMC Isilon OneFS OneFS 8.0.1.0, OneFS 8.0.0.0 8.0.0.2, OneF…
- CVE-2017-7968An Incorrect Default Permissions issue was discovered in Schneider Electric Wonderware InduSoft Web Studio v8.0 Patch 3 and prior versions.Schneider Electric Wonderware InduSoft Web Studio
- CVE-2017-9080PlaySMS 1.4 allows remote code execution because PHP code in the name of an uploaded .php file is executed.
- CVE-2017-9077The tcp_v6_syn_recv_sock function in net/ipv6/tcp_ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users
- CVE-2017-9078The server in Dropbear before 2017.75 might allow post-authentication root remote code execution because of a double free in cleanup of TCP
- CVE-2017-9079Dropbear before 2017.75 might allow local users to read certain files as root, if the file has the authorized_keys file format with a comman
- CVE-2017-9074The IPv6 fragmentation implementation in the Linux kernel through 4.11.1 does not consider that the nexthdr field may be associated with an
- CVE-2017-9075The sctp_v6_create_accept_sk function in net/sctp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local users
- CVE-2017-9076The dccp_v6_request_recv_sock function in net/dccp/ipv6.c in the Linux kernel through 4.11.1 mishandles inheritance, which allows local user
- CVE-2017-5173An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0Geutebruck IP Cameras
- CVE-2017-5174An Authentication Bypass issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12.Geutebruck IP Cameras
- CVE-2017-5176A DLL Hijack issue was discovered in Rockwell Automation Connected Components Workbench (CCW).Rockwell Automation Connected Components Workbench
- CVE-2017-5177A Stack Buffer Overflow issue was discovered in VIPA Controls WinPLC7 5.0.45.5921 and prior.VIPA Controls WinPLC7
- CVE-2017-6016An Improper Access Control issue was discovered in LCDS - Leao Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA.LCDS Leao Consultoria e Desenvolvimento de Sistemas LTDA ME…
- CVE-2017-6025A Stack Buffer Overflow issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server.3S-Smart Software Solutions GmbH CODESYS Web Server
- CVE-2017-6027An Arbitrary File Upload issue was discovered in 3S-Smart Software Solutions GmbH CODESYS Web Server.3S-Smart Software Solutions GmbH CODESYS Web Server
- CVE-2017-6048A Command Injection issue was discovered in Satel Iberia SenNet Data Logger and Electricity Meters: SenNet Optimal DataLogger V5.37c-1.43c aSatel Iberia SenNet Data Logger and Electricity Meters
- CVE-2017-7907An Improper XML Parser Configuration issue was discovered in Schneider Electric Wonderware Historian Client 2014 R2 SP1 and prior.Schneider Electric Wonderware Historian Client
- CVE-2017-7935A Resource Exhaustion issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2.Phoenix Contact GmbH mGuard
- CVE-2017-7937An Improper Authentication issue was discovered in Phoenix Contact GmbH mGuard firmware versions 8.3.0 to 8.4.2.Phoenix Contact GmbH mGuard