CVEs published June 13, 2017
121 CVEs were published on June 13, 2017: 0 critical, 0 high.
- Published
- 121
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 121
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- All Qualcomm products
- 51
- Cisco Elastic Services Controller
- 9
- Cloud Foundry
- 5
- IBM Rational Quality Manager
- 4
- Cisco Ultra Services Framework Element Manager
- 3
- Cloud Foundry UAA · org.cloudfoundry.identity:cloudfoundry-…
- 3
- PCF Elastic Runtime
- 3
- Pivotal RabbitMQ
- 3
- Cisco Ultra Services Framework
- 2
- Cisco Ultra Services Platform
- 2
Medium, low and unrated 121
- CVE-2014-9960In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API.All Qualcomm products
- CVE-2014-9961In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-onAll Qualcomm products
- CVE-2014-9962In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of a DRM provisioning command.All Qualcomm products
- CVE-2014-9963In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM.All Qualcomm products
- CVE-2014-9964In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality.All Qualcomm products
- CVE-2014-9965In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of an SCM call.All Qualcomm products
- CVE-2014-9966In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure All Qualcomm products
- CVE-2014-9967In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.All Qualcomm products
- CVE-2015-9020In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory.All Qualcomm products
- CVE-2015-9021In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled.All Qualcomm products
- CVE-2015-9022In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs.All Qualcomm products
- CVE-2015-9023In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API.All Qualcomm products
- CVE-2015-9024In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications.All Qualcomm products
- CVE-2015-9025In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application.All Qualcomm products
- CVE-2015-9026In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.All Qualcomm products
- CVE-2015-9027In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM.All Qualcomm products
- CVE-2015-9028In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine.All Qualcomm products
- CVE-2015-9029In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access control settings of modem memory.All Qualcomm products
- CVE-2015-9030In all Android releases from CAF using the Linux kernel, the Hypervisor API could be misused to bypass authentication.All Qualcomm products
- CVE-2015-9031In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP.All Qualcomm products
- CVE-2015-9032In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications.All Qualcomm products
- CVE-2015-9033In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer.All Qualcomm products
- CVE-2016-10332In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications.All Qualcomm products
- CVE-2016-10333In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS.All Qualcomm products
- CVE-2016-10334In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten.All Qualcomm products
- CVE-2016-10335In all Android releases from CAF using the Linux kernel, libtomcrypt was updated.All Qualcomm products
- CVE-2016-10336In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot.All Qualcomm products
- CVE-2016-10337In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed.All Qualcomm products
- CVE-2016-10338In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing.All Qualcomm products
- CVE-2016-10339In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore.All Qualcomm products
- CVE-2016-10340In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall hAll Qualcomm products
- CVE-2016-10341In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended.All Qualcomm products
- CVE-2016-10342In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler.All Qualcomm products
- CVE-2017-7365In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated.All Qualcomm products
- CVE-2017-7366In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters.
- CVE-2017-7367In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image.All Qualcomm products
- CVE-2017-7368In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver.All Qualcomm products
- CVE-2017-7369In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading toAll Qualcomm products
- CVE-2017-7370In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free cAll Qualcomm products
- CVE-2017-7371In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned oAll Qualcomm products
- CVE-2017-7372In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow orAll Qualcomm products
- CVE-2017-7373In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver.All Qualcomm products
- CVE-2017-8233In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when writing into an array poAll Qualcomm products
- CVE-2017-8234In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera function.All Qualcomm products
- CVE-2017-8235In all Android releases from CAF using the Linux kernel, a memory structure in a camera driver is not properly protected.All Qualcomm products
- CVE-2017-8236In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver.All Qualcomm products
- CVE-2017-8237In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware image.All Qualcomm products
- CVE-2017-8238In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function.All Qualcomm products
- CVE-2017-8239In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are not sanitized potentiaAll Qualcomm products
- CVE-2017-8240In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability.All Qualcomm products
- CVE-2017-8241In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a WLAN function due to an incorrect messaAll Qualcomm products
- CVE-2017-8242In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memoryAll Qualcomm products
- CVE-2016-9973IBM Jazz Foundation is vulnerable to cross-site scripting.IBM Rational Collaborative Lifecycle Management
- CVE-2016-9984IBM Maximo Asset Management 7.5 and 7.6 could allow a remote authenticated attacker to execute arbitrary commands on the system as administrIBM Maximo Asset Management
- CVE-2017-1099IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions.IBM Rational Collaborative Lifecycle Management
- CVE-2017-1100IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2017-1101IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2017-1102IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2017-1104IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.IBM Rational Quality Manager
- CVE-2017-9605The vmw_gb_surface_define_ioctl function (accessible via DRM_IOCTL_VMW_GB_SURFACE_CREATE) in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the
- CVE-2017-9246New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during usNewRelic.Agent
- CVE-2017-9429SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitrary SQL commands via
- CVE-2017-9603SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via
- CVE-2016-3704Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords.
- CVE-2016-5391libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon restart).
- CVE-2015-3220The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash).tlslite
- CVE-2015-4596Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges.
- CVE-2016-3696The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key.
- CVE-2016-5411/var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer (QCI) before 1.0 GA is created world readable and cont
- CVE-2017-9552A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline.Synology Photo Station
- CVE-2017-9604KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/en
- CVE-2016-6655An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31.Cloud Foundry
- CVE-2016-8218An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231.Cloud Foundry
- CVE-2016-8219An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0.Cloud Foundry
- CVE-2017-2773An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.60, 1.7.x versions prior to 1.7.41, 1.8.x versions prior PCF Elastic Runtime
- CVE-2017-4955An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior PCF Elastic Runtime
- CVE-2017-4959An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7.PCF Elastic Runtime
- CVE-2017-4961An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions.Cloud Foundry Foundation BOSH Release
- CVE-2017-4963An issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier versions, UAA stand-alone release v2.0.0 - v2.7.4Cloud Foundry Foundation
- CVE-2017-4965An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and tPivotal RabbitMQ
- CVE-2017-4966An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and tPivotal RabbitMQ
- CVE-2017-4967An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and tPivotal RabbitMQ
- CVE-2017-4970An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack versions v1.4.0 - v1.4.3.Cloud Foundry
- CVE-2017-4971An issue was discovered in Pivotal Spring Web Flow through 2.4.4.Spring Web Flow · org.springframework.webflow:spring-webflow
- CVE-2017-4972An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x veCloud Foundry UAA
- CVE-2017-4973An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x veCloud Foundry UAA · org.cloudfoundry.identity:cloudfoundry-…
- CVE-2017-4974An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x veCloud Foundry UAA · org.cloudfoundry.identity:cloudfoundry-…
- CVE-2017-4975An issue was discovered in Pivotal PCF Tile Generator versions prior to 6.0.0.PCF Tile Generator
- CVE-2017-4991An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x veCloud Foundry UAA · org.cloudfoundry.identity:cloudfoundry-…
- CVE-2017-4992An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x veCloud Foundry · org.cloudfoundry.identity:cloudfoundry-iden…
- CVE-2017-4994An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x veCloud Foundry
- CVE-2017-6655A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adCisco NX-OS Software Fibre Channel over Ethernet
- CVE-2017-6656A vulnerability in Session Initiation Protocol (SIP) call handling of Cisco IP Phone 8800 Series devices could allow an unauthenticated, remCisco IP Phone 8800 Series
- CVE-2017-6659A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attackerCisco Prime Collaboration Assurance
- CVE-2017-6661A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) and Cisco Content Security Management AppliancCisco Email Security and Content Security Management Applia…
- CVE-2017-6666A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could alCisco Network Convergence System 5500 Series Routers
- CVE-2017-6667A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (SDK) could allow an unCisco Context Service SDK
- CVE-2017-6668Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker toCisco Unified Communications Domain Manager
- CVE-2017-6670A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redirCisco Unified Communications Domain Manager
- CVE-2017-6671A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticaCisco Email Security Appliance
- CVE-2017-6673A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information.Cisco Firepower Management Center
- CVE-2017-6674A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote atCisco Firepower System Software
- CVE-2017-6675A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a refleCisco Industrial Network Director
- CVE-2017-6680A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to create Cisco Ultra Services Framework
- CVE-2017-6681A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to exeCisco Ultra Services Framework
- CVE-2017-6682A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to run arbitrary commanCisco Elastic Services Controller
- CVE-2017-6683A vulnerability in the esc_listener.py script of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to executeCisco Elastic Services Controller
- CVE-2017-6684A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the LCisco Elastic Services Controller
- CVE-2017-6685A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the managementCisco Ultra Services Framework Staging Server
- CVE-2017-6686A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the managemenCisco Ultra Services Framework Element Manager
- CVE-2017-6687A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the managemenCisco Ultra Services Framework Element Manager
- CVE-2017-6688A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the LCisco Elastic Services Controller
- CVE-2017-6689A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affecteCisco Elastic Services Controller
- CVE-2017-6690A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system cCisco StarOS
- CVE-2017-6691A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive infCisco Elastic Services Controller
- CVE-2017-6692A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log in to the device withCisco Ultra Services Framework Element Manager
- CVE-2017-6693A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local attacker to access iCisco Elastic Services Controller
- CVE-2017-6694A vulnerability in the Virtual Network Function Manager's (VNFM) logging function of Cisco Ultra Services Platform could allow an authenticaCisco Ultra Services Platform
- CVE-2017-6695A vulnerability in the ConfD server in Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive informatCisco Ultra Services Platform
- CVE-2017-6696A vulnerability in the file system of Cisco Elastic Services Controllers could allow an authenticated, local attacker to gain access to sensCisco Elastic Services Controller
- CVE-2017-6697A vulnerability in the web interface of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitiveCisco Elastic Services Controller