CVEs published June 29, 2017
38 CVEs were published on June 29, 2017: 0 critical, 8 high.
- Published
- 38
- Critical
- 0
- High
- 8
- Medium
- 2
- Low
- 0
- Unrated
- 28
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Foscam Indoor IP Camera C1 Series
- 8
- Lenovo Group Lenovo Vibe and Lenovo China-only Moto Mobile…
- 3
- Microsoft Windows
- 3
- IBM Informix Servers
- 1
- Lenovo Group Lenovo Nerve Center
- 1
- Microsoft Azure AD Connect
- 1
- Microsoft Malware Protection Engine
- 1
- Microsoft Microsof Windows
- 1
- TIBCO Software TIBCO JasperReports Library Community Edi… +5
- 1
- TIBCO Software TIBCO JasperReports Server · TIBCO Softwa… +1
- 1
High 8
- CVE-2017-2844In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allFoscam Indoor IP Camera C1 Series
- CVE-2017-2845An exploitable command injection vulnerability exists in the web management interface used by the Foscam C1 Indoor HD Camera running applicaFoscam Indoor IP Camera C1 Series
- CVE-2017-2846In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allFoscam Indoor IP Camera C1 Series
- CVE-2017-2847In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allFoscam Indoor IP Camera C1 Series
- CVE-2017-2848In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allFoscam Indoor IP Camera C1 Series
- CVE-2017-2849In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allFoscam Indoor IP Camera C1 Series
- CVE-2017-2850In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allFoscam Indoor IP Camera C1 Series
- CVE-2017-2851In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can cauFoscam Indoor IP Camera C1 Series
Medium, low and unrated 30
- CVE-2017-10683In mpg123 1.25.0, there is a heap-based buffer over-read in the convert_latin1 function in libmpg123/id3.c.
- CVE-2017-10684In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function.
- CVE-2017-10685In ncurses 6.0, there is a format string vulnerability in the fmt_entry function.
- CVE-2017-10686In Netwide Assembler (NASM) 2.14rc0, there are multiple heap use after free vulnerabilities in the tool nasm.
- CVE-2017-10687In LibSass 3.4.5, there is a heap-based buffer over-read in the function json_mkstream() in sass_context.cpp.
- CVE-2017-10688In LibTIFF 4.0.8, there is a assertion abort in the TIFFWriteDirectoryTagCheckedLong8Array function in tif_dirwrite.c.
- CVE-2017-10678Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for re
- CVE-2017-10679Piwigo through 2.9.1 allows remote attackers to obtain sensitive information about the descriptive name of a permalink by examining the redi
- CVE-2017-10680Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for re
- CVE-2017-10681Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for re
- CVE-2017-10682SQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote users to execute arbitrary SQL commands via
- CVE-2017-4997EMC VASA Provider Virtual Appliance versions 8.3.x and prior has an unauthenticated remote code execution vulnerability that could potentialVASA Provider Virtual Appliance versions 8.3.x and prior
- CVE-2017-3747Privilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems (Lenovo Nerve Center for notebook systems is notLenovo Group Lenovo Nerve Center
- CVE-2017-3748On Lenovo VIBE mobile phones, improper access controls on the nac_server component can be abused in conjunction with CVE-2017-3749 and CVE-2Lenovo Group Lenovo Vibe and Lenovo China-only Moto Mobile…
- CVE-2017-3749On Lenovo VIBE mobile phones, the Idea Friend Android application allows private data to be backed up and restored via Android Debug Bridge,Lenovo Group Lenovo Vibe and Lenovo China-only Moto Mobile…
- CVE-2017-3750On Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be backed up and restored via Android Debug BriLenovo Group Lenovo Vibe and Lenovo China-only Moto Mobile…
- CVE-2017-5528TIBCO JasperReports Server cross-site vulnerabilitiesTIBCO Software TIBCO JasperReports Server · TIBCO Softwa… +1
- CVE-2017-5529TIBCO JasperReports Library Information DisclosureTIBCO Software TIBCO JasperReports Library Community Edi… +5
- CVE-2017-1310IBM Informix Dynamic Server 12.1 could allow an authenticated user to cause a buffer overflow that would write large assertion fail files toIBM Informix Servers
- CVE-2017-8554The kernel in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, WindoMicrosoft Microsof Windows
- CVE-2017-8558The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on 32-bit versions of Microsoft Windows ServerMicrosoft Malware Protection Engine
- CVE-2017-8575The kernel in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to obtain information viMicrosoft Windows
- CVE-2017-8576The graphics component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to run arbitMicrosoft Windows
- CVE-2017-8579The DirectX component in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an authenticated attacker to run arbitrMicrosoft Windows
- CVE-2017-8613Azure AD Connect Password writeback, if misconfigured during enablement, allows an attacker to reset passwords and gain unauthorized access Microsoft Azure AD Connect
- CVE-2017-10671Heap-based Buffer Overflow in the de_dotdot function in libhttpd.c in sthttpd before 2.27.1 allows remote attackers to cause a denial of ser
- CVE-2017-10672Use-after-free in the XML-LibXML module through 2.0129 for Perl allows remote attackers to execute arbitrary code by controlling the argumen
- CVE-2017-10673admin/profile.php in GetSimple CMS 3.x has XSS in a name field.
- CVE-2016-10042Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) devices before R7.7 allows unauthorized recon
- CVE-2017-10667In index.php in Zen Cart 1.6.0, the products_id parameter can cause XSS.