# CVEs published 2017-06-26 29 CVEs were published on June 26, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-7458](https://cve.now/CVE-2017-7458.md): The NetworkInterface::getHost function in NetworkInterface.cpp in ntopng before 3.0 allows remote attackers to cause a denial of service (NU (no CVSS) - [CVE-2017-9953](https://cve.now/CVE-2017-9953.md): There is an invalid free in Image::printIFDStructure that leads to a Segmentation fault in Exiv2 0.26. (no CVSS) - [CVE-2017-9954](https://cve.now/CVE-2017-9954.md): The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remo (no CVSS) - [CVE-2017-9955](https://cve.now/CVE-2017-9955.md): The get\_build\_id function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows (no CVSS) - [CVE-2017-6324](https://cve.now/CVE-2017-6324.md): The Symantec Messaging Gateway, when processing a specific email attachment, can allow a malformed or corrupted Word file with a potentially (no CVSS, Symantec Messaging Gateway) - [CVE-2017-6325](https://cve.now/CVE-2017-6325.md): The Symantec Messaging Gateway can encounter a file inclusion vulnerability, which is a type of vulnerability that is most commonly found to (no CVSS, Symantec Messaging Gateway) - [CVE-2017-6326](https://cve.now/CVE-2017-6326.md): The Symantec Messaging Gateway can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain (no CVSS, Symantec Messaging Gateway) - [CVE-2017-9949](https://cve.now/CVE-2017-9949.md): The grub\_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer (no CVSS) - [CVE-2016-8493](https://cve.now/CVE-2016-8493.md): In FortiClientWindows 5.4.1 and 5.4.2, an attacker may escalate privilege via a FortiClientNamedPipe vulnerability. (no CVSS, Fortinet FortiClient) - [CVE-2014-8127](https://cve.now/CVE-2014-8127.md): LibTIFF 4.0.3 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted TIFF image to the (1) checkI (no CVSS) - [CVE-2015-1870](https://cve.now/CVE-2015-1870.md): The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, (no CVSS) - [CVE-2015-3142](https://cve.now/CVE-2015-3142.md): The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing c (no CVSS) - [CVE-2015-3215](https://cve.now/CVE-2015-3215.md): The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted length value in an IP pack (no CVSS) - [CVE-2015-3315](https://cve.now/CVE-2015-3315.md): Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files (no CVSS) - [CVE-2017-7496](https://cve.now/CVE-2017-7496.md): fedora-arm-installer up to and including 1.99.16 is vulnerable to local privilege escalation due to lack of checking the error condition of (no CVSS, Red Hat fedora-arm-installer) - [CVE-2017-9948](https://cve.now/CVE-2017-9948.md): A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishand (no CVSS) - [CVE-2017-9145](https://cve.now/CVE-2017-9145.md): TikiFilter.php in Tiki Wiki CMS Groupware 12.x through 16.x does not properly validate the imgsize or lang parameter to prevent XSS. (no CVSS) - [CVE-2017-9935](https://cve.now/CVE-2017-9935.md): In LibTIFF 4.0.8, there is a heap-based buffer overflow in the t2p\_write\_pdf function in tools/tiff2pdf.c. (no CVSS) - [CVE-2017-9936](https://cve.now/CVE-2017-9936.md): In LibTIFF 4.0.8, there is a memory leak in tif\_jbig.c. (no CVSS) - [CVE-2017-9937](https://cve.now/CVE-2017-9937.md): In LibTIFF 4.0.8, there is a memory malloc failure in tif\_jbig.c. (no CVSS) - [CVE-2017-6662](https://cve.now/CVE-2017-6662.md): A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could all (no CVSS, Cisco Prime Infrastructure and Evolved Programmable Network…) - [CVE-2017-6669](https://cve.now/CVE-2017-6669.md): Multiple buffer overflow vulnerabilities exist in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files. (no CVSS, Cisco WebEx Network Recording Player) - [CVE-2017-6678](https://cve.now/CVE-2017-6678.md): A vulnerability in the ingress UDP packet processing functionality of Cisco Virtualized Packet Core-Distributed Instance (VPC-DI) Software 1 (no CVSS, Cisco Virtualized Packet Core-Distributed Instance) - [CVE-2017-7416](https://cve.now/CVE-2017-7416.md): ntopng before 3.0 allows XSS because GET and POST parameters are improperly validated. (no CVSS) - [CVE-2017-7459](https://cve.now/CVE-2017-7459.md): ntopng before 3.0 allows HTTP Response Splitting. (no CVSS) - [CVE-2017-9466](https://cve.now/CVE-2017-9466.md): The executable httpd on the TP-Link WR841N V8 router before TL-WR841N(UN)\_V8\_170210 contained a design flaw in the use of DES for block encr (no CVSS) - [CVE-2017-9615](https://cve.now/CVE-2017-9615.md): Password exposure in Cognito Software Moneyworks 8.0.3 and earlier allows attackers to gain administrator access to all data, because verbos (no CVSS) - [CVE-2017-9928](https://cve.now/CVE-2017-9928.md): In lrzip 0.631, a stack buffer overflow was found in the function get\_fileinfo in lrzip.c:979, which allows attackers to cause a denial of s (no CVSS) - [CVE-2017-9929](https://cve.now/CVE-2017-9929.md): In lrzip 0.631, a stack buffer overflow was found in the function get\_fileinfo in lrzip.c:1074, which allows attackers to cause a denial of (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-06-26 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.