CVEs published June 26, 2017
29 CVEs were published on June 26, 2017: 0 critical, 0 high.
- Published
- 29
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 29
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Symantec Messaging Gateway
- 3
- Cisco Prime Infrastructure and Evolved Programmable Network…
- 1
- Cisco Virtualized Packet Core-Distributed Instance
- 1
- Cisco WebEx Network Recording Player
- 1
- Fortinet FortiClient
- 1
- Red Hat fedora-arm-installer
- 1
Medium, low and unrated 29
- CVE-2017-7458The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NU
- CVE-2017-9953There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26.
- CVE-2017-9954The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remo
- CVE-2017-9955The get_build_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows
- CVE-2017-6324The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentiallySymantec Messaging Gateway
- CVE-2017-6325The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found toSymantec Messaging Gateway
- CVE-2017-6326The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtainSymantec Messaging Gateway
- CVE-2017-9949The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer
- CVE-2016-8493In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability.Fortinet FortiClient
- CVE-2014-8127LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkI
- CVE-2015-1870The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories,
- CVE-2015-3142The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing c
- CVE-2015-3215The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted length value in an IP pack
- CVE-2015-3315Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files
- CVE-2017-7496fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of Red Hat fedora-arm-installer
- CVE-2017-9948A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishand
- CVE-2017-9145TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS.
- CVE-2017-9935In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p_write_pdf function in tools/tiff2pdf.c.
- CVE-2017-9936In LibTIFF 4.0.8, there is a memory leak in tif_jbig.c.
- CVE-2017-9937In LibTIFF 4.0.8, there is a memory malloc failure in tif_jbig.c.
- CVE-2017-6662A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allCisco Prime Infrastructure and Evolved Programmable Network…
- CVE-2017-6669Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files.Cisco WebEx Network Recording Player
- CVE-2017-6678A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software 1Cisco Virtualized Packet Core-Distributed Instance
- CVE-2017-7416ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated.
- CVE-2017-7459ntopng before 3.0 allows HTTP Response Splitting.
- CVE-2017-9466The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)_V8_170210 contained a design flaw in the use of DES for block encr
- CVE-2017-9615Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all data, because verbos
- CVE-2017-9928In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:979, which allows attackers to cause a denial of s
- CVE-2017-9929In lrzip 0.631, a stack buffer overflow was found in the function get_fileinfo in lrzip.c:1074, which allows attackers to cause a denial of