CVEs published June 27, 2017
53 CVEs were published on June 27, 2017: 1 critical, 3 high. 1 is now in CISA KEV.
- Published
- 53
- Critical
- 1
- High
- 3
- Medium
- 0
- Low
- 0
- Unrated
- 49
- Now in CISA KEV
- 1
- Fix available
- 2
Most affected products
- OpenVPN Technologies OpenVPN
- 4
- Foscam Indoor IP Camera C1 Series
- 3
- IBM Security QRadar SIEM
- 3
- IBM API Connect
- 2
- IBM DB2 for Linux, UNIX and Windows
- 2
- IBM Tivoli Monitoring
- 1
- opensolutions/vimbadmin
- 1
- org.opendaylight.odlparent:opendaylight-karaf-resources
- 1
- phpunit/phpunit
- 1
- TPM 2.0 Tools tpm2-tools
- 1
Critical 1
High 3
- CVE-2017-2841An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicaFoscam Indoor IP Camera C1 Series
- CVE-2017-2842In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can aFoscam Indoor IP Camera C1 Series
- CVE-2017-2843In the web management interface in Foscam C1 Indoor HD Camera running application firmware 2.52.2.37, a specially crafted HTTP request can aFoscam Indoor IP Camera C1 Series
Medium, low and unrated 49
- CVE-2004-2778Ebuild in Gentoo may change directory and file permissions depending on the order of installed packages, which allows local users to read or
- CVE-2012-5010ASA 5515-X Adaptive Security Appliance Adaptive Security Appliance (ASA) Software 9.4.x before 9.4.1 Interim, 9.2.x before 9.2.4 Interim, AS
- CVE-2014-6354Internet Explorer 6, Internet Explorer 7, Internet Explorer 8, Internet Explorer 9, Internet Explorer 10, and Internet Explorer 11 allows re
- CVE-2014-8149OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files.
- CVE-2015-1591The kamailio build in kamailio before 4.2.0-2 process allows local users to gain privileges.
- CVE-2015-1778The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any usernameorg.opendaylight.odlparent:opendaylight-karaf-resources
- CVE-2015-1795Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root.
- CVE-2015-2245Huawei Ascend P7 allows remote attackers to cause a denial of service (phone process crash).
- CVE-2015-3840The MessageStatusReceiver service in the AndroidManifest.XML in Android 5.1.1 and earlier allows local users to alter sent/received statuses
- CVE-2015-5180res_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service (NULL pointer dereference and process crash
- CVE-2015-5378Logstash 1.5.x before 1.5.3 and 1.4.x before 1.4.4 allows remote attackers to read communications between Logstash Forwarder agent and Logst
- CVE-2015-7780Directory traversal vulnerability in ManageEngine Firewall Analyzer before 8.0.
- CVE-2015-7781ManageEngine Firewall Analyzer before 8.0 does not restrict access permissions.
- CVE-2015-7895Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
- CVE-2015-7898Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).
- CVE-2015-8697stalin 0.11-5 allows local users to write to arbitrary files.
- CVE-2016-0959Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.
- CVE-2016-4383The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authentic
- CVE-2016-5414FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services.
- CVE-2016-6342elog 3.1.1 allows remote attackers to post data as any username in the logbook.
- CVE-2016-7062rhscon-ceph in Red Hat Storage Console 2 x86_64 and Red Hat Storage Console Node 2 x86_64 allows local users to obtain the password as clear
- CVE-2017-2491Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remote attackers to execu
- CVE-2017-6086Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attacopensolutions/vimbadmin
- CVE-2017-9830Remote Code Execution is possible in Code42 CrashPlan 5.4.x via the org.apache.commons.ssl.rmi.DateRMI Java class, because (upon instantiati
- CVE-2016-6083IBM Tivoli Monitoring V6 could allow an unauthenticated user to access SOAP queries that could contain sensitive information.IBM Tivoli Monitoring
- CVE-2016-9738IBM QRadar 7.2 and 7.3 does not require that users should have strong passwords by default, which makes it easier for attackers to compromisIBM Security QRadar SIEM
- CVE-2016-9972IBM QRadar 7.2 and 7.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict TIBM Security QRadar SIEM
- CVE-2017-1105IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a buffer overflow that could alIBM DB2 for Linux, UNIX and Windows
- CVE-2017-1234IBM QRadar 7.2 and 7.3 is vulnerable to cross-site scripting.IBM Security QRadar SIEM
- CVE-2017-1297IBM DB2 for Linux, UNIX and Windows 9.2, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) is vulnerable to a stack-based buffer overflow, IBM DB2 for Linux, UNIX and Windows
- CVE-2017-1322IBM API Connect 5.0.6.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.IBM API Connect
- CVE-2017-1328IBM API Connect 5.0.0.0 - 5.0.6.0 could allow a remote attacker to bypass security restrictions of the api, caused by improper handling of sIBM API Connect
- CVE-2017-9982TeamSpeak Client 3.0.19 allows remote attackers to cause a denial of service (application crash) via the ᗪ Unicode character followed
- CVE-2017-7524tpm2-tools versions before 1.1.1 are vulnerable to a password leak due to transmitting password in plaintext from client to server when geneTPM 2.0 Tools tpm2-tools
- CVE-2017-7508OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.OpenVPN Technologies OpenVPN
- CVE-2017-7520OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-iOpenVPN Technologies OpenVPN
- CVE-2017-7521OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks aOpenVPN Technologies OpenVPN
- CVE-2017-7522OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificaOpenVPN Technologies OpenVPN
- CVE-2017-9218The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a d
- CVE-2017-9219The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a d
- CVE-2017-9220The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a d
- CVE-2017-9221The mp4ff_read_mdhd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a d
- CVE-2017-9222The mp4ff_parse_tag function in common/mp4ff/mp4meta.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a d
- CVE-2017-9223The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a d
- CVE-2017-9253The mp4ff_read_stsd function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a d
- CVE-2017-9254The mp4ff_read_stts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a d
- CVE-2017-9255The mp4ff_read_stsc function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a d
- CVE-2017-9256The mp4ff_read_stco function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a d
- CVE-2017-9257The mp4ff_read_ctts function in common/mp4ff/mp4atom.c in Freeware Advanced Audio Decoder 2 (FAAD2) 2.7 allows remote attackers to cause a d