CVEs published June 21, 2017
32 CVEs were published on June 21, 2017: 3 critical, 5 high.
- Published
- 32
- Critical
- 3
- High
- 5
- Medium
- 0
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Foscam Indoor IP Camera C1 Series
- 6
- Trihedral VTScada
- 3
- Cambium Networks ePMP
- 2
- Acronis True Image
- 1
- Ecava IntegraXor
- 1
- EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226,…
- 1
- EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125,…
- 1
- EMC Isilon OneFS 8.0.1.0, 8.0.0 8.0.0.3, 7.2.0 - 7.2.1.4, 7…
- 1
- Foscan Foscam C1 Webcam
- 1
- IBM Elastic Storage Server
- 1
Critical 3
- CVE-2016-8731Hard-coded FTP credentials (r:r) are included in the Foscam C1 running firmware 1.9.1.12.Foscan Foscam C1 Webcam
- CVE-2017-2805An exploitable stack-based buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera.Foscam Indoor IP Camera C1 Series
- CVE-2017-2831An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicatiFoscam Indoor IP Camera C1 Series
High 5
- CVE-2017-2813An exploitable integer overflow vulnerability exists in the JPEG 2000 parser functionality of IrfanView 4.44.Irfanview
- CVE-2017-2827An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicaFoscam Indoor IP Camera C1 Series
- CVE-2017-2828An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicaFoscam Indoor IP Camera C1 Series
- CVE-2017-2829An exploitable directory traversal vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running appliFoscam Indoor IP Camera C1 Series
- CVE-2017-2830An exploitable buffer overflow vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicatiFoscam Indoor IP Camera C1 Series
Medium, low and unrated 24
- CVE-2016-7508Multiple SQL injection vulnerabilities in GLPI 0.90.4 allow an authenticated remote attacker to execute arbitrary SQL commands by using a ce
- CVE-2017-3218Samsung Magician 5.0 fails to validate TLS certificates for HTTPS software update traffic.Samsung Magician
- CVE-2017-3219Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP.Acronis True Image
- CVE-2017-4988EMC Isilon OneFS 8.0.1.0, 8.0.0 - 8.0.0.3, 7.2.0 - 7.2.1.4, 7.1.x is affected by a privilege escalation vulnerability that could potentiallyEMC Isilon OneFS 8.0.1.0, 8.0.0 8.0.0.3, 7.2.0 - 7.2.1.4, 7…
- CVE-2017-4989In EMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226, 7.2.1-32, 7.2.1-31, 7.2.0-401, an unauthenticated remote attacker may potentiEMC Avamar Server Software 7.3.1-125, 7.3.0-233, 7.3.0-226,…
- CVE-2017-4990In EMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125, 7.3.0-233, 7.3.0-226, an unauthorized attacker may leverage the file upload feEMC Avamar Server Software 7.4.1-58, 7.4.0-242, 7.3.1-125,…
- CVE-2017-9782JasPer 2.0.12 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted image,
- CVE-2017-6043A Resource Consumption issue was discovered in Trihedral VTScada Versions prior to 11.2.26.Trihedral VTScada
- CVE-2017-6045An Information Exposure issue was discovered in Trihedral VTScada Versions prior to 11.2.26.Trihedral VTScada
- CVE-2017-6050A SQL Injection issue was discovered in Ecava IntegraXor Versions 5.2.1231.0 and prior.Ecava IntegraXor
- CVE-2017-6053A Cross-Site Scripting issue was discovered in Trihedral VTScada Versions prior to 11.2.26.Trihedral VTScada
- CVE-2017-7918An Improper Access Control issue was discovered in Cambium Networks ePMP.Cambium Networks ePMP
- CVE-2017-7922An Improper Privilege Management issue was discovered in Cambium Networks ePMP.Cambium Networks ePMP
- CVE-2017-1117IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a denial of service to the MQXR channel when trace is enabled.IBM MQ
- CVE-2017-1304IBM has identified a vulnerability with IBM Spectrum Scale/GPFS utilized on the Elastic Storage Server (ESS)/GPFS Storage Server (GSS) durinIBM Elastic Storage Server
- CVE-2017-9773Denial of Service was found in Horde_Image 2.x before 2.5.0 via a crafted URL to the "Null" image driver.
- CVE-2017-9774Remote Code Execution was found in Horde_Image 2.x before 2.5.0 via a crafted GET request.
- CVE-2017-9781A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to 1.4.0p6, allowing an unauthenticated remote attacker
- CVE-2017-9780In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for ex
- CVE-2017-9129The wav_open_read function in frontend/input.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of ser
- CVE-2017-9130The faacEncOpen function in libfaac/frame.c in Freeware Advanced Audio Coder (FAAC) 1.28 allows remote attackers to cause a denial of servic
- CVE-2017-9766In Wireshark 2.2.7, PROFINET IO data with a high recursion depth allows remote attackers to cause a denial of service (stack exhaustion) in
- CVE-2017-9771install\save.php in WebsiteBaker v2.10.0 allows remote attackers to execute arbitrary PHP code via the database_username, database_host, or
- CVE-2017-9778GNU Debugger (GDB) 8.0 and earlier fails to detect a negative length field in a DWARF section.