CVEs published June 14, 2017
37 CVEs were published on June 14, 2017: 0 critical, 2 high.
- Published
- 37
- Critical
- 0
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 35
- Now in CISA KEV
- 0
- Fix available
- 5
Most affected products
- Google Android
- 17
- Apache Software Foundation Apache Ranger · org.apache.range…
- 4
- Atlassian Bamboo
- 1
- Digital Canal Structural Wind Analysis
- 1
- EMC ESRS Virtual Edition EMC ESRS VE 3.18 or earlier
- 1
- Intel Active Mangement Technology
- 1
- Kenneth Reitz Tablib · tablib
- 1
- Rockwell Automation PanelView Plus 6 700-1500
- 1
- RSA BSAFE Cert-C RSA BSAFE Cert-C
- 1
High 2
- CVE-2017-8907Atlassian Bamboo 5.x before 5.15.7 and 6.x before 6.0.1 did not correctly check if a user creating a deployment project had the edit permissAtlassian Bamboo
- CVE-2017-2810An exploitable vulnerability exists in the Databook loading functionality of Tablib 0.11.4.Kenneth Reitz Tablib · tablib
Medium, low and unrated 35
- CVE-2017-4981EMC RSA BSAFE Cert-C before 2.9.0.5 contains a potential improper certificate processing vulnerability.RSA BSAFE Cert-C RSA BSAFE Cert-C
- CVE-2017-4986EMC ESRS VE 3.18 or earlier contains Authentication Bypass that could potentially be exploited by malicious users to compromise the affectedEMC ESRS Virtual Edition EMC ESRS VE 3.18 or earlier
- CVE-2017-7910A Stack-Based Buffer Overflow issue was discovered in Digital Canal Structural Wind Analysis versions 9.1 and prior.Digital Canal Structural Wind Analysis
- CVE-2017-7914A Missing Authorization issue was discovered in Rockwell Automation PanelView Plus 6 700-1500 6.00.04, 6.00.05, 6.00.42, 6.00-20140306, 6.10Rockwell Automation PanelView Plus 6 700-1500
- CVE-2017-9621Cross-site scripting (XSS) vulnerability in modules/Base/Lang/Administrator/update_translation.php in EPESI in Telaxus/EPESI 1.8.2 and earli
- CVE-2017-9622Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script
- CVE-2017-9623Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script
- CVE-2017-9624Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script
- CVE-2017-9616In Wireshark 2.2.7, overly deep mp4 chunks may cause stack exhaustion (uncontrolled recursion) in the dissect_mp4_box function in epan/disse
- CVE-2017-9617In Wireshark 2.2.7, deeply nested DAAP data may cause stack exhaustion (uncontrolled recursion) in the dissect_daap_one_tag function in epan
- CVE-2017-9463The application Piwigo is affected by a SQL injection vulnerability in version 2.9.0 and possibly prior.
- CVE-2017-9464An open redirect vulnerability is present in Piwigo 2.9 and probably prior versions, allowing remote attackers to redirect users to arbitrar
- CVE-2016-8746Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recuApache Software Foundation Apache Ranger · org.apache.range…
- CVE-2016-8751Apache Ranger before 0.6.3 is vulnerable to a Stored Cross-Site Scripting in when entering custom policy conditions.Apache Software Foundation Apache Ranger · org.apache.range…
- CVE-2017-7676Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '*' wildcard character - like my*test, test*.txt.Apache Software Foundation Apache Ranger · org.apache.range…
- CVE-2017-7677In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission Apache Software Foundation Apache Ranger · org.apache.range…
- CVE-2017-0636An elevation of privilege vulnerability in the MediaTek command queue driver could enable a local malicious application to execute arbitraryGoogle Android
- CVE-2017-0637A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corrGoogle Android
- CVE-2017-0638A remote code execution vulnerability in System UI component could enable an attacker using a specially crafted file to execute arbitrary coGoogle Android
- CVE-2017-0639An information disclosure vulnerability in Bluetooth component could enable a local malicious application to access data outside of its permGoogle Android
- CVE-2017-0640A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or rGoogle Android
- CVE-2017-0641A remote denial of service vulnerability in libvpx in Mediaserver could enable an attacker to use a specially crafted file to cause a deviceGoogle Android
- CVE-2017-0642A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a devicGoogle Android
- CVE-2017-0643A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or rGoogle Android
- CVE-2017-0644A remote denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or rGoogle Android
- CVE-2017-0645An elevation of privilege vulnerability in Bluetooth could enable a local malicious application to access data outside of its permission levGoogle Android
- CVE-2017-0646An information disclosure vulnerability in Bluetooth component could enable a local malicious application to access data outside of its permGoogle Android
- CVE-2017-0647An information disclosure vulnerability in libziparchive could enable a local malicious application to access data outside of its permissionGoogle Android
- CVE-2017-0648An elevation of privilege vulnerability in the kernel FIQ debugger could enable a local malicious application to execute arbitrary code withGoogle Android
- CVE-2017-0649An elevation of privilege vulnerability in the MediaTek sound driver could enable a local malicious application to execute arbitrary code wiGoogle Android
- CVE-2017-0650An information disclosure vulnerability in the Synaptics touchscreen driver could enable a local malicious application to access data outsidGoogle Android
- CVE-2017-0651An information disclosure vulnerability in the kernel ION subsystem could enable a local malicious application to access data outside of itsGoogle Android
- CVE-2017-0663A remote code execution vulnerability in libxml2 could enable an attacker using a specially crafted file to execute arbitrary code within thGoogle Android
- CVE-2017-9502In curl before 7.54.1 on Windows and DOS, libcurl's default protocol function, which is the logic that allows an application to set which pr
- CVE-2017-5697Insufficient clickjacking protection in the Web User Interface of Intel AMT firmware versions before 9.1.40.1000, 9.5.60.1952, 10.0.50.1004,Intel Active Mangement Technology