CVEs published June 22, 2017
19 CVEs were published on June 22, 2017: 0 critical, 2 high.
- Published
- 19
- Critical
- 0
- High
- 2
- Medium
- 1
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- IBM Sterling B2B Integrator
- 3
- Oracle Solaris Operating System
- 3
- Inside Secure MatrixSSL
- 2
- EllisLab ExpressionEngine
- 1
- IBM Rational Engineering Lifecycle Manager
- 1
- Microsoft Windows Server 2003 SP1, SP2 Windows XP - SP3
- 1
High 2
- CVE-2017-2780An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b.Inside Secure MatrixSSL
- CVE-2017-2781An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b.Inside Secure MatrixSSL
Medium, low and unrated 17
- CVE-2017-0897ExpressionEngine version 2.x < 2.11.8 and version 3.x < 3.5.5 create an object signing token with weak entropy.EllisLab ExpressionEngine
- CVE-2017-2782An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b.
- CVE-2017-9775Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application
- CVE-2017-9776Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a d
- CVE-2015-9098In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Monitor, resulting in t
- CVE-2016-9747IBM RELM 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting.IBM Rational Engineering Lifecycle Manager
- CVE-2016-9982IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists dueIBM Sterling B2B Integrator
- CVE-2016-9983IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should noIBM Sterling B2B Integrator
- CVE-2017-1326IBM Sterling File Gateway does not properly restrict user requests based on permission level.IBM Sterling B2B Integrator
- CVE-2017-9424IdeaBlade Breeze Breeze.Server.NET before 1.6.5 allows remote attackers to execute arbitrary code, related to use of TypeNameHandling in JSO
- CVE-2017-9815In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif_dirread.c mishandles a malloc operation, which allows attackers to
- CVE-2017-0176A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a rMicrosoft Windows Server 2003 SP1, SP2 Windows XP - SP3
- CVE-2012-6706A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and
- CVE-2017-3629Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).Oracle Solaris Operating System
- CVE-2017-3630Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).Oracle Solaris Operating System
- CVE-2017-3631Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).Oracle Solaris Operating System
- CVE-2017-9807An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices.