# CVEs published 2017-06-22

19 CVEs were published on June 22, 2017: 0 critical, 2 high. Days are UTC.

- [CVE-2017-0897](https://cve.now/CVE-2017-0897.md): ExpressionEngine version 2.x \< 2.11.8 and version 3.x \< 3.5.5 create an object signing token with weak entropy. (no CVSS, EllisLab ExpressionEngine)
- [CVE-2017-2780](https://cve.now/CVE-2017-2780.md): An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. (CVSS 8.1, Inside Secure MatrixSSL)
- [CVE-2017-2781](https://cve.now/CVE-2017-2781.md): An exploitable heap buffer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. (CVSS 8.1, Inside Secure MatrixSSL)
- [CVE-2017-2782](https://cve.now/CVE-2017-2782.md): An integer overflow vulnerability exists in the X509 certificate parsing functionality of InsideSecure MatrixSSL 3.8.7b. (CVSS 6.5)
- [CVE-2017-9775](https://cve.now/CVE-2017-9775.md): Stack buffer overflow in GfxState.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a denial of service (application (no CVSS)
- [CVE-2017-9776](https://cve.now/CVE-2017-9776.md): Integer overflow leading to Heap buffer overflow in JBIG2Stream.cc in pdftocairo in Poppler before 0.56 allows remote attackers to cause a d (no CVSS)
- [CVE-2015-9098](https://cve.now/CVE-2015-9098.md): In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Monitor, resulting in t (no CVSS)
- [CVE-2016-9747](https://cve.now/CVE-2016-9747.md): IBM RELM 4.0, 5.0 and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Rational Engineering Lifecycle Manager)
- [CVE-2016-9982](https://cve.now/CVE-2016-9982.md): IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user to obtain sensitive information such as account lists due (no CVSS, IBM Sterling B2B Integrator)
- [CVE-2016-9983](https://cve.now/CVE-2016-9983.md): IBM Sterling B2B Integrator Standard Edition 5.2 could allow an authenticated user with special privileges to view files that they should no (no CVSS, IBM Sterling B2B Integrator)
- [CVE-2017-1326](https://cve.now/CVE-2017-1326.md): IBM Sterling File Gateway does not properly restrict user requests based on permission level. (no CVSS, IBM Sterling B2B Integrator)
- [CVE-2017-9424](https://cve.now/CVE-2017-9424.md): IdeaBlade Breeze Breeze.Server.NET before 1.6.5 allows remote attackers to execute arbitrary code, related to use of TypeNameHandling in JSO (no CVSS)
- [CVE-2017-9815](https://cve.now/CVE-2017-9815.md): In LibTIFF 4.0.7, the TIFFReadDirEntryLong8Array function in libtiff/tif\_dirread.c mishandles a malloc operation, which allows attackers to (no CVSS)
- [CVE-2017-0176](https://cve.now/CVE-2017-0176.md): A buffer overflow in Smart Card authentication code in gpkcsp.dll in Microsoft Windows XP through SP3 and Server 2003 through SP2 allows a r (no CVSS, Microsoft Windows Server 2003 SP1, SP2 Windows XP - SP3)
- [CVE-2012-6706](https://cve.now/CVE-2012-6706.md): A VMSF\_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and (no CVSS)
- [CVE-2017-3629](https://cve.now/CVE-2017-3629.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-3630](https://cve.now/CVE-2017-3630.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-3631](https://cve.now/CVE-2017-3631.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-9807](https://cve.now/CVE-2017-9807.md): An issue was discovered in the OpenWebif plugin through 1.2.4 for E2 open devices. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-06-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.