CVEs published June 6, 2017
49 CVEs were published on June 6, 2017: 0 critical, 0 high.
- Published
- 49
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 49
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- All Qualcomm products
- 24
- Apache Software Foundation Apache Tomcat · org.apache.tomca…
- 1
- mercurial
- 1
- org.apache.xmlrpc:xmlrpc-common
- 1
- postgresql:pljava-public
- 1
- Rapid7 Nexpose hardware appliance
- 1
- Red Hat poppler
- 1
Medium, low and unrated 49
- CVE-2017-9461smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a denial of service vulnerability (fd_open_atomic infinite loop with high CPU usage a
- CVE-2017-9462In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbimercurial
- CVE-2017-9465The yr_arena_write_data function in YARA 3.6.1 allows remote attackers to cause a denial of service (buffer over-read and application crash)
- CVE-2014-8180MongoDB on Red Hat Satellite 6 allows local users to bypass authentication by logging in with an empty password and delete information which
- CVE-2015-1207Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service (
- CVE-2015-3830The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows remote attackers to t
- CVE-2016-0726The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin" administrator account, which makes it easier for
- CVE-2016-0767PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter the public schema claspostgresql:pljava-public
- CVE-2016-0768PostgreSQL PL/Java after 9.0 does not honor access controls on large objects.
- CVE-2016-2192PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own.
- CVE-2016-3066The spice-gtk widget allows remote authenticated users to obtain information from the host clipboard.
- CVE-2016-3077The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated users to cause a denial of service (process cra
- CVE-2016-5004The Content-Encoding HTTP header feature in ws-xmlrpc 3.1.3 as used in Apache Archiva allows remote attackers to cause a denial of service (org.apache.xmlrpc:xmlrpc-common
- CVE-2016-9960game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
- CVE-2016-9961game-music-emu before 0.6.1 mishandles unspecified integer values.
- CVE-2017-5243The default SSH configuration in Rapid7 Nexpose hardware appliances shipped before June 2017 does not specify desired algorithms for key excRapid7 Nexpose hardware appliance
- CVE-2017-8920irc.cgi in CGI:IRC before 0.5.12 reflects user-supplied input from the R parameter without proper output encoding, aka XSS.
- CVE-2017-9451Cross site scripting (XSS) vulnerability in pages.edit_form.php in flatCore 1.4.6 allows remote attackers to inject arbitrary JavaScript via
- CVE-2017-9452Cross-site scripting (XSS) vulnerability in admin.php in Piwigo 2.9.0 and earlier allows remote attackers to inject arbitrary web script or
- CVE-2017-9448Cross-site scripting (XSS) vulnerabilities in BigTree CMS through 4.2.18 allow remote authenticated users to inject arbitrary web script or
- CVE-2017-9449SQL injection vulnerability in BigTree CMS through 4.2.18 allows remote authenticated users to execute arbitrary SQL commands via core/admin
- CVE-2014-9923In NAS in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentiallyAll Qualcomm products
- CVE-2014-9924In 1x in all Android releases from CAF using the Linux kernel, a Signed to Unsigned Conversion Error could potentially occur.All Qualcomm products
- CVE-2014-9925In HDR in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentiallyAll Qualcomm products
- CVE-2014-9926In GNSS in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.All Qualcomm products
- CVE-2014-9927In UIM in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentiallyAll Qualcomm products
- CVE-2014-9928In GERAN in all Android releases from CAF using the Linux kernel, a Buffer Copy without Checking Size of Input vulnerability could potentialAll Qualcomm products
- CVE-2014-9929In WCDMA in all Android releases from CAF using the Linux kernel, a Use of Out-of-range Pointer Offset vulnerability could potentially existAll Qualcomm products
- CVE-2014-9930In WCDMA in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.All Qualcomm products
- CVE-2014-9941In the Embedded File System in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerabilitAll Qualcomm products
- CVE-2014-9942In Boot in all Android releases from CAF using the Linux kernel, a Use of Uninitialized Variable vulnerability could potentially exist.All Qualcomm products
- CVE-2014-9943In Core Kernel in all Android releases from CAF using the Linux kernel, a Null Pointer Dereference vulnerability could potentially exist.All Qualcomm products
- CVE-2014-9944In the Secure File System in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability coulAll Qualcomm products
- CVE-2014-9945In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.All Qualcomm products
- CVE-2014-9946In Core Kernel in all Android releases from CAF using the Linux kernel, a Use After Free vulnerability could potentially exist.All Qualcomm products
- CVE-2014-9947In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure vulnerability could potentially exist.All Qualcomm products
- CVE-2014-9948In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerability could potentially All Qualcomm products
- CVE-2014-9949In TrustZone in all Android releases from CAF using the Linux kernel, an Untrusted Pointer Dereference vulnerability could potentially existAll Qualcomm products
- CVE-2014-9950In Core Kernel in all Android releases from CAF using the Linux kernel, an Improper Authorization vulnerability could potentially exist.All Qualcomm products
- CVE-2014-9951In TrustZone in all Android releases from CAF using the Linux kernel, an Information Exposure Through Timing Discrepancy vulnerability couldAll Qualcomm products
- CVE-2014-9952In the Secure File System in all Android releases from CAF using the Linux kernel, a capture-replay vulnerability could potentially exist.All Qualcomm products
- CVE-2015-9005In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerability could potentiallyAll Qualcomm products
- CVE-2015-9006In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vulnerability could poteAll Qualcomm products
- CVE-2015-9007In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exist.All Qualcomm products
- CVE-2016-10297In TrustZone in all Android releases from CAF using the Linux kernel, a Time-of-Check Time-of-Use Race Condition vulnerability could potentiAll Qualcomm products
- CVE-2017-5664The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the errorApache Software Foundation Apache Tomcat · org.apache.tomca…
- CVE-2017-7515poppler through version 0.55.0 is vulnerable to an uncontrolled recursion in pdfunite resulting into potential denial-of-service.Red Hat poppler
- CVE-2017-8083CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of f
- CVE-2017-9332The smarty_self function in modules/module_smarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the