CVEs published July 2, 2017
11 CVEs were published on July 2, 2017: 0 critical, 0 high.
- Published
- 11
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 11
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- intelliants/subrion
- 1
- Tor
- 1
Medium, low and unrated 11
- CVE-2017-10794When GraphicsMagick 1.3.25 processes an RGB TIFF picture (with metadata indicating a single sample per pixel) in coders/tiff.c, a buffer ove
- CVE-2017-10796On TP-Link NC250 devices with firmware through 1.2.1 build 170515, anyone can view video and audio without authentication via an rtsp://admi
- CVE-2017-8797The NFSv4 server in the Linux kernel before 4.11.3 does not properly validate the layout type when processing the NFSv4 pNFS GETDEVICEINFO o
- CVE-2017-8893AeroAdmin 4.1 uses a function to copy data between two pointers where the size of the data copied is taken directly from a network packet.
- CVE-2017-8894AeroAdmin 4.1 uses an insecure protocol (HTTP) to perform software updates.
- CVE-2017-0377Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm that only considers the exit relay (not the exit relay's family), which might allowTor
- CVE-2017-10706When Antiy Antivirus Engine before 5.0.0.05171547 scans a special ZIP archive, it crashes with a stack-based buffer overflow because a fixed
- CVE-2017-10795Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body tointelliants/subrion
- CVE-2017-10790The _asn1_check_identifier function in GNU Libtasn1 through 4.12 causes a NULL pointer dereference and crash when reading crafted input that
- CVE-2017-10791There is an Integer overflow in the hash_int function of the libpspp library in GNU PSPP before 0.11.0.
- CVE-2017-10792There is a NULL Pointer Dereference in the function ll_insert() of the libpspp library in GNU PSPP before 0.11.0.