CVEs published June 20, 2017
31 CVEs were published on June 20, 2017: 0 critical, 0 high.
- Published
- 31
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 31
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Adobe Digital Editions 4.5.4 and earlier.
- 9
- Adobe Flash Player 25.0.0.171 and earlier.
- 9
- Apache Software Foundation Apache HTTP Server
- 4
- Adobe Captivate 9 and earlier.
- 2
- Milwaukee Tool ONE-KEY
- 2
- Adobe Shockwave 12.2.8.198 and earlier.
- 1
- Huawei Technologies BM2022 · Huawei Technologies HES-30… +12
- 1
- Lenovo Group Lenovo System x IMM2
- 1
- Lenovo Group ToolsCenter
- 1
- Lenovo Group XClarity Administrator
- 1
Medium, low and unrated 31
- CVE-2017-3075Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XMAdobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3076Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module.Adobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3077Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser.Adobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3078Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) modAdobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3079Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of rasAdobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3081Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by muAdobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3082Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class.Adobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3083Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality relatAdobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3084Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising metadata functionalitAdobe Flash Player 25.0.0.171 and earlier.
- CVE-2017-3086Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability.Adobe Shockwave 12.2.8.198 and earlier.
- CVE-2017-3087Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in CaAdobe Captivate 9 and earlier.
- CVE-2017-3088Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime engine.Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3089Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF imaging model.Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3090Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability.Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3092Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability.Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3093Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the bitmap representation module.Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3094Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF processing engine.Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3095Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF parsing engine.Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3096Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character code mapping module.Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3097Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability.Adobe Digital Editions 4.5.4 and earlier.
- CVE-2017-3098Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to readAdobe Captivate 9 and earlier.
- CVE-2017-3167In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentApache Software Foundation Apache HTTP Server
- CVE-2017-3169In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_prApache Software Foundation Apache HTTP Server
- CVE-2017-7668The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token()Apache Software Foundation Apache HTTP Server
- CVE-2017-7679In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious CoApache Software Foundation Apache HTTP Server
- CVE-2017-3214The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary.Milwaukee Tool ONE-KEY
- CVE-2017-3215The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year.Milwaukee Tool ONE-KEY
- CVE-2017-3216WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remoteHuawei Technologies BM2022 · Huawei Technologies HES-30… +12
- CVE-2017-3743If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced SettiLenovo Group ToolsCenter
- CVE-2017-3744In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in the First Failure DataLenovo Group Lenovo System x IMM2
- CVE-2017-3745In Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a non-administrative user may have access to Lenovo Group XClarity Administrator