# CVEs published 2017-06-01

13 CVEs were published on June 1, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2015-0936](https://cve.now/CVE-2015-0936.md): Ceragon FibeAir IP-10 have a default SSH public key in the authorized\_keys file for the mateidu user, which allows remote attackers to obtai (no CVSS)
- [CVE-2015-5473](https://cve.now/CVE-2015-5473.md): Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecifi (no CVSS)
- [CVE-2015-6531](https://cve.now/CVE-2015-6531.md): Palo Alto Networks Panorama VM Appliance with PAN-OS before 6.0.1 might allow remote attackers to execute arbitrary Python code via a crafte (no CVSS)
- [CVE-2017-6512](https://cve.now/CVE-2017-6512.md): Race condition in the rmtree and remove\_tree functions in the File-Path module before 2.13 for Perl allows attackers to set the mode on arbi (no CVSS)
- [CVE-2017-7384](https://cve.now/CVE-2017-7384.md): Cross-site scripting (XSS) vulnerability in FlipBuilder Flip PDF allows remote attackers to inject arbitrary web script or HTML via the curr (no CVSS)
- [CVE-2017-7999](https://cve.now/CVE-2017-7999.md): Atlassian Eucalyptus before 4.4.1, when in EDGE mode, allows remote authenticated users with certain privileges to cause a denial of service (no CVSS)
- [CVE-2017-8386](https://cve.now/CVE-2017-8386.md): git-shell in git before 2.4.12, 2.5.x before 2.5.6, 2.6.x before 2.6.7, 2.7.x before 2.7.5, 2.8.x before 2.8.5, 2.9.x before 2.9.4, 2.10.x b (no CVSS)
- [CVE-2017-9060](https://cve.now/CVE-2017-9060.md): Memory leak in the virtio\_gpu\_set\_scanout function in hw/display/virtio-gpu.c in QEMU (aka Quick Emulator) allows local guest OS users to ca (no CVSS)
- [CVE-2017-3127](https://cve.now/CVE-2017-3127.md): A Cross-Site Scripting vulnerability in Fortinet FortiGate 5.2.0 through 5.2.10 allows attacker to execute unauthorized code or commands via (no CVSS)
- [CVE-2017-9331](https://cve.now/CVE-2017-9331.md): The Agenda component in Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Utils/RecordBrowser (no CVSS)
- [CVE-2017-9334](https://cve.now/CVE-2017-9334.md): An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to (no CVSS)
- [CVE-2017-9336](https://cve.now/CVE-2017-9336.md): The WP Editor.MD plugin 1.6 for WordPress has a stored XSS vulnerability in the content of a post. (no CVSS)
- [CVE-2017-9337](https://cve.now/CVE-2017-9337.md): The Markdown on Save Improved plugin 2.5 for WordPress has a stored XSS vulnerability in the content of a post. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-06-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.