CVEs published July 10, 2017
33 CVEs were published on July 10, 2017: 1 critical, 0 high. 1 is now in CISA KEV.
- Published
- 33
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 32
- Now in CISA KEV
- 1
- Fix available
- 2
Most affected products
- Apache Software Foundation Apache Impala
- 2
- Cisco Identity Services Engine
- 2
- Cisco IOS XR
- 2
- Cisco Wide Area Application Services
- 2
- IBM MQ
- 2
- Apache Software Foundation Apache Struts · org.apache.strut…
- 1
- Apache Software Foundation Apache Traffic Control · github.…
- 1
- Cisco FireSIGHT System Software
- 1
- Cisco Prime Network
- 1
- Cisco Prime Network Gateway
- 1
Critical 1
Medium, low and unrated 32
- CVE-2017-5640It was noticed that a malicious process impersonating an Impala daemon in Apache Impala (incubating) 2.7.0 to 2.8.0 could cause Impala daemoApache Software Foundation Apache Impala
- CVE-2017-5652During a routine security analysis, it was found that one of the ports in Apache Impala (incubating) 2.7.0 to 2.8.0 sent data in plaintext eApache Software Foundation Apache Impala
- CVE-2017-6726A vulnerability in the CLI of the Cisco Prime Network Gateway could allow an authenticated, local attacker to retrieve system process informCisco Prime Network Gateway
- CVE-2017-6727A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, reCisco Wide Area Application Services
- CVE-2017-6728A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary code at the root priviCisco IOS XR
- CVE-2017-6729A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 SeriesCisco StarOS
- CVE-2017-6730A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unauthenticated, remote aCisco Wide Area Application Services
- CVE-2017-6731A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR Software could allow an unauthenticCisco IOS XR
- CVE-2017-6732A vulnerability in the installation procedure for Cisco Prime Network Software could allow an authenticated, local attacker to elevate theirCisco Prime Network
- CVE-2017-6733A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, reCisco Identity Services Engine
- CVE-2017-6734A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote Cisco Identity Services Engine
- CVE-2017-6735A vulnerability in the backup and restore functionality of Cisco FireSIGHT System Software could allow an authenticated, local attacker to eCisco FireSIGHT System Software
- CVE-2017-8032In Cloud Foundry cf-release versions prior to v264; UAA release all versions of UAA v2.x.x, 3.6.x versions prior to v3.6.13, 3.9.x versions Cloud Foundry · org.cloudfoundry.identity:cloudfoundry-iden…
- CVE-2017-7175NfSen before 1.3.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the customfmt parameter (aka the "Cu
- CVE-2017-11163Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti 1.1.12 allows remote authenticated users to inject arbitrary web s
- CVE-2017-11166The ReadXWDImage function in coders\xwd.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a craf
- CVE-2017-7670The Traffic Router component of the incubating Apache Traffic Control project is vulnerable to a Slowloris style Denial of Service attack.Apache Software Foundation Apache Traffic Control · github.…
- CVE-2017-1284IBM WebSphere MQ 9.0.1 and 9.0.2 could allow a local user with ability to run or enable trace, to obtain sensitive information from WebSpherIBM MQ
- CVE-2017-1337IBM WebSphere MQ 9.0.1 and 9.0.2 Java/JMS application can incorrectly transmit user credentials in plain text.IBM MQ
- CVE-2017-1398IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 6.0, 7.0, and 8.0 could allow a remote attacker to conduct phishing IBM WebSphere Commerce Enterprise
- CVE-2016-10397In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to byp
- CVE-2017-11142In PHP before 5.6.31, 7.x before 7.0.17, and 7.1.x before 7.1.3, remote attackers could cause a CPU consumption denial of service attack by
- CVE-2017-11143In PHP before 5.6.31, an invalid free in the WDDX deserialization of boolean parameters could be used by attackers able to inject XML for de
- CVE-2017-11144In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, the openssl extension PEM sealing code did not check the return value of th
- CVE-2017-11145In PHP before 5.6.31, 7.x before 7.0.21, and 7.1.x before 7.1.7, an error in the date extension's timelib_meridian parsing code could be use
- CVE-2017-11147In PHP before 5.6.30 and 7.x before 7.0.15, the PHAR archive handler could be used by attackers supplying malicious archive files to crash t
- CVE-2017-11124libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_unserialize function in archive.c.
- CVE-2017-11125libxar.so in xar 1.6.1 has a NULL pointer dereference in the xar_get_path function in util.c.
- CVE-2017-11126The III_i_stereo function in libmpg123/layer3.c in mpg123 through 1.25.1 allows remote attackers to cause a denial of service (buffer over-r
- CVE-2017-11139GraphicsMagick 1.3.26 has double free vulnerabilities in the ReadOneJNGImage() function in coders/png.c.
- CVE-2017-11140The ReadJPEGImage function in coders/jpeg.c in GraphicsMagick 1.3.26 creates a pixel cache before a successful read of a scanline, which all
- CVE-2017-11141The ReadMATImage function in coders\mat.c in ImageMagick 7.0.5-6 has a memory leak vulnerability that can cause memory exhaustion via a craf