CVEs published July 6, 2017
69 CVEs were published on July 6, 2017: 0 critical, 0 high.
- Published
- 69
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 69
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Google Android
- 46
- Cisco Ultra Services Framework
- 4
- Cisco Elastic Services Controller
- 2
- Cisco StarOS
- 1
- IBM MQ
- 1
- Nvidia Android
- 1
- org.python:jython-standalone · org.python:jython
- 1
- stdlib
- 1
Medium, low and unrated 69
- CVE-2017-0664A elevation of privilege vulnerability in the Android framework.Google Android
- CVE-2017-0665A elevation of privilege vulnerability in the Android framework.Google Android
- CVE-2017-0666A elevation of privilege vulnerability in the Android framework.Google Android
- CVE-2017-0667A elevation of privilege vulnerability in the Android framework.Google Android
- CVE-2017-0668A information disclosure vulnerability in the Android framework.Google Android
- CVE-2017-0669A information disclosure vulnerability in the Android framework.Google Android
- CVE-2017-0670A denial of service vulnerability in the Android framework.Google Android
- CVE-2017-0671A remote code execution vulnerability in the Android libraries.Google Android
- CVE-2017-0672A denial of service vulnerability in the Android libraries.Google Android
- CVE-2017-0673A remote code execution vulnerability in the Android media framework.Google Android
- CVE-2017-0674A remote code execution vulnerability in the Android media framework.Google Android
- CVE-2017-0675A remote code execution vulnerability in the Android media framework.Google Android
- CVE-2017-0676A remote code execution vulnerability in the Android media framework.Google Android
- CVE-2017-0677A remote code execution vulnerability in the Android media framework.Google Android
- CVE-2017-0678A remote code execution vulnerability in the Android media framework.Google Android
- CVE-2017-0679A remote code execution vulnerability in the Android media framework.Google Android
- CVE-2017-0680A remote code execution vulnerability in the Android media framework.Google Android
- CVE-2017-0681A remote code execution vulnerability in the Android media framework.Google Android
- CVE-2017-0682A remote code execution vulnerability in the Android media framework.Google Android
- CVE-2017-0683A remote code execution vulnerability in the Android media framework.Google Android
- CVE-2017-0684A elevation of privilege vulnerability in the Android media framework.Google Android
- CVE-2017-0685A denial of service vulnerability in the Android media framework.Google Android
- CVE-2017-0686A denial of service vulnerability in the Android media framework.Google Android
- CVE-2017-0688A denial of service vulnerability in the Android media framework.Google Android
- CVE-2017-0689A denial of service vulnerability in the Android media framework.Google Android
- CVE-2017-0690A denial of service vulnerability in the Android media framework.Google Android
- CVE-2017-0691A denial of service vulnerability in the Android media framework.Google Android
- CVE-2017-0692A denial of service vulnerability in the Android media framework.Google Android
- CVE-2017-0693A denial of service vulnerability in the Android media framework.Google Android
- CVE-2017-0694A denial of service vulnerability in the Android media framework.Google Android
- CVE-2017-0695A denial of service vulnerability in the Android media framework.Google Android
- CVE-2017-0696A denial of service vulnerability in the Android media framework.Google Android
- CVE-2017-0697A denial of service vulnerability in the Android media framework.Google Android
- CVE-2017-0698A information disclosure vulnerability in the Android media framework.Google Android
- CVE-2017-0699A information disclosure vulnerability in the Android media framework.Google Android
- CVE-2017-0700A remote code execution vulnerability in the Android system ui.Google Android
- CVE-2017-0701A remote code execution vulnerability in the Android system ui.Google Android
- CVE-2017-0702A remote code execution vulnerability in the Android system ui.Google Android
- CVE-2017-0703A elevation of privilege vulnerability in the Android system ui.Google Android
- CVE-2017-0704A elevation of privilege vulnerability in the Android system ui.Google Android
- CVE-2017-0705A elevation of privilege vulnerability in the Broadcom wi-fi driver.Google Android
- CVE-2017-0706A elevation of privilege vulnerability in the Broadcom wi-fi driver.Google Android
- CVE-2017-0707A elevation of privilege vulnerability in the HTC led driver.Google Android
- CVE-2017-0708A information disclosure vulnerability in the HTC sound driver.Google Android
- CVE-2017-0709A information disclosure vulnerability in the HTC sensor hub driver.
- CVE-2017-0710A elevation of privilege vulnerability in the Upstream Linux tcb.Google Android
- CVE-2017-0711A elevation of privilege vulnerability in the MediaTek networking driver.Google Android
- CVE-2017-6247An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code withNvidia Android
- CVE-2017-6248An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code with
- CVE-2016-4000Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.org.python:jython-standalone · org.python:jython
- CVE-2017-10967In FineCMS before 2017-07-06, application\core\controller\config.php allows XSS in the (1) key_name, (2) key_value, and (3) meaning paramete
- CVE-2017-10973In FineCMS before 2017-07-06, application/lib/ajax/get_image_data.php has SSRF, related to requests for non-image files with a modified HTTP
- CVE-2017-8290A potential Buffer Overflow Vulnerability (from a BB Code handling issue) has been identified in TeamSpeak Server version 3.0.13.6 (08/11/20
- CVE-2017-8932A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 caustdlib
- CVE-2017-9524The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows remote attackers to
- CVE-2017-10976When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock() function in lib/ttf
- CVE-2017-10975Cross-site scripting (XSS) vulnerability in Lutim before 0.8 might allow remote attackers to inject arbitrary web script or HTML via a craft
- CVE-2017-1236IBM WebSphere MQ 9.0.2 could allow an authenticated user to potentially cause a denial of service by saving an incorrect channel status inquIBM MQ
- CVE-2017-10970Cross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML vi
- CVE-2017-10971In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by
- CVE-2017-10972Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious u
- CVE-2016-10396The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragm
- CVE-2017-6707A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 SerieCisco StarOS
- CVE-2017-6708A vulnerability in the symbolic link (symlink) creation functionality of the AutoVNF tool for the Cisco Ultra Services Framework could allowCisco Ultra Services Framework
- CVE-2017-6709A vulnerability in the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to access adminisCisco Ultra Services Framework
- CVE-2017-6711A vulnerability in the Ultra Automation Service (UAS) of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker Cisco Ultra Services Framework
- CVE-2017-6712A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker to elevate privilegesCisco Elastic Services Controller
- CVE-2017-6713A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to gain fulCisco Elastic Services Controller
- CVE-2017-6714A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to exCisco Ultra Services Framework