CVEs published June 28, 2017
18 CVEs were published on June 28, 2017: 0 critical, 0 high.
- Published
- 18
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 18
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Apache Software Foundation Apache Ignite · org.apache.ignit…
- 1
- Biscom Secure File Transfer
- 1
- IBM Cram Social Program Management
- 1
Medium, low and unrated 18
- CVE-2017-1106IBM Curam Social Program Management 5.2, 6.0, and 7.0 is vulnerable to cross-site scripting.IBM Cram Social Program Management
- CVE-2017-5241Biscom Secure File Transfer versions 5.0.0.0 trough 5.1.1024 are vulnerable to post-authentication persistent cross-site scripting (XSS) in Biscom Secure File Transfer
- CVE-2017-7686Apache Ignite 1.0.0-RC3 to 2.0 uses an update notifier component to update the users about new project releases that include additional funcApache Software Foundation Apache Ignite · org.apache.ignit…
- CVE-2017-9998The _dwarf_decode_s_leb128_chk function in dwarf_leb.c in libdwarf through 2017-06-28 allows remote attackers to cause a denial of service (
- CVE-2017-9445In systemd through 233, certain sizes passed to dns_packet_new in systemd-resolved can cause it to allocate a buffer that's too small.
- CVE-2017-9984The snd_msnd_interrupt function in sound/isa/msnd/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of
- CVE-2017-9985The snd_msndmidi_input_read function in sound/isa/msnd/msnd_midi.c in the Linux kernel through 4.11.7 allows local users to cause a denial o
- CVE-2017-9986The intr function in sound/oss/msnd_pinnacle.c in the Linux kernel through 4.11.7 allows local users to cause a denial of service (over-boun
- CVE-2017-9987There is a heap-based buffer overflow in the function hpel_motion in mpegvideo_motion.c in libav 12.1.
- CVE-2017-9988The readEncUInt30 function in util/read.c in libming 0.4.8 mishandles memory allocation.
- CVE-2017-9989util/outputtxt.c in libming 0.4.8 mishandles memory allocation.
- CVE-2017-9990Stack-based buffer overflow in the color_string_to_rgba function in libavcodec/xpmdec.c in FFmpeg 3.3 before 3.3.1 allows remote attackers t
- CVE-2017-9991Heap-based buffer overflow in the xwd_decode_frame function in libavcodec/xwddec.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before
- CVE-2017-9992Heap-based buffer overflow in the decode_dds1 function in libavcodec/dfa.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8,
- CVE-2017-9993FFmpeg before 2.8.12, 3.0.x and 3.1.x before 3.1.9, 3.2.x before 3.2.6, and 3.3.x before 3.3.2 does not properly restrict HTTP Live Streamin
- CVE-2017-9994libavcodec/webp.c in FFmpeg before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.5, and 3.3.x before 3.3.1 does not ensur
- CVE-2017-9995libavcodec/scpr.c in FFmpeg 3.3 before 3.3.1 does not properly validate height and width data, which allows remote attackers to cause a deni
- CVE-2017-9996The cdxl_decode_frame function in libavcodec/cdxl.c in FFmpeg 2.8.x before 2.8.12, 3.0.x before 3.0.8, 3.1.x before 3.1.8, 3.2.x before 3.2.