CVEs published July 4, 2017
30 CVEs were published on July 4, 2017: 0 critical, 0 high.
- Published
- 30
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 30
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Cisco Prime Collaboration Provisioning Tool
- 4
- Cisco Firepower Management Center
- 3
- Cisco Prime Infrastructure and Evolved Programmable Network…
- 3
- Cisco Identity Services Engine
- 2
- Cisco IOS XR
- 2
- Cisco Prime Infrastructure
- 2
- Cisco SocialMiner
- 1
- Cisco StarOS for ASR 5000 Series Routers
- 1
- Cisco Unified Contact Center Express
- 1
- Cisco Wide Area Application Services
- 1
Medium, low and unrated 30
- CVE-2017-10810Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel through 4.11.8 allows at
- CVE-2017-10803In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the D
- CVE-2017-10804In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under
- CVE-2017-10805In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the
- CVE-2017-7276There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019.
- CVE-2017-10807JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is n
- CVE-2017-7315An issue was discovered on Humax Digital HG100R 2.0.6 devices.
- CVE-2017-7316An issue was discovered on Humax Digital HG100R 2.0.6 devices.
- CVE-2017-7317An issue was discovered on Humax Digital HG100 2.0.6 devices.
- CVE-2017-9313Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via
- CVE-2017-3865A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated, remote attacker to Cisco StarOS for ASR 5000 Series Routers
- CVE-2017-6605A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker Cisco Identity Services Engine
- CVE-2017-6698A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow anCisco Prime Infrastructure and Evolved Programmable Network…
- CVE-2017-6699A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) couCisco Prime Infrastructure and Evolved Programmable Network…
- CVE-2017-6700A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) couCisco Prime Infrastructure and Evolved Programmable Network…
- CVE-2017-6701A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote aCisco Identity Services Engine
- CVE-2017-6702A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting Cisco SocialMiner
- CVE-2017-6703A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker toCisco Prime Collaboration Provisioning Tool
- CVE-2017-6704A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to pCisco Prime Collaboration Provisioning Tool
- CVE-2017-6705A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquireCisco Prime Collaboration Provisioning Tool
- CVE-2017-6706A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker tCisco Prime Collaboration Provisioning Tool
- CVE-2017-6715A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-sCisco Firepower Management Center
- CVE-2017-6716A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a stCisco Firepower Management Center
- CVE-2017-6717A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-sCisco Firepower Management Center
- CVE-2017-6718A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level.Cisco IOS XR
- CVE-2017-6719A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host oCisco IOS XR
- CVE-2017-6721A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could allow an unauthentiCisco Wide Area Application Services
- CVE-2017-6722A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow Cisco Unified Contact Center Express
- CVE-2017-6724A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-sCisco Prime Infrastructure
- CVE-2017-6725A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-sCisco Prime Infrastructure