CVEs published July 12, 2017
39 CVEs were published on July 12, 2017: 0 critical, 4 high.
- Published
- 39
- Critical
- 0
- High
- 4
- Medium
- 0
- Low
- 0
- Unrated
- 35
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- IBM Emptoris Sourcing
- 6
- McAfee Advanced Threat Defense
- 5
- Poppler
- 3
- IBM InfoSphere Information Server
- 1
- IBM MQ
- 1
- Iceni Infix
- 1
- ipsilon
- 1
- org.apache.spark:spark-core_2.11 · org.apache.spark:spark-c…
- 1
High 4
- CVE-2017-2814An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0.Poppler
- CVE-2017-2818An exploitable heap overflow vulnerability exists in the image rendering functionality of Poppler 0.53.0.Poppler
- CVE-2017-2820An exploitable integer overflow vulnerability exists in the JPEG 2000 image parsing functionality of freedesktop.org Poppler 0.53.0.Poppler
- CVE-2017-2863An out-of-bounds write vulnerability exists in the PDF parsing functionality of Infix 7.1.5.Iceni Infix
Medium, low and unrated 35
- CVE-2017-11174In install/page_dbsettings.php in the Core distribution of XOOPS 2.5.8.1, unfiltered data passed to CREATE and ALTER SQL queries caused SQL
- CVE-2017-11193Pulse Connect Secure 8.3R1 has CSRF in diag.cgi.
- CVE-2017-11194Pulse Connect Secure 8.3R1 has Reflected XSS in adminservercacertdetails.cgi.
- CVE-2017-11195Pulse Connect Secure 8.3R1 has Reflected XSS in launchHelp.cgi.
- CVE-2017-11196Pulse Connect Secure 8.3R1 has CSRF in logout.cgi.
- CVE-2016-6114IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting.IBM Emptoris Sourcing
- CVE-2016-8946IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting.IBM Emptoris Sourcing
- CVE-2016-8947IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack.IBM Emptoris Sourcing
- CVE-2016-8948IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting.IBM Emptoris Sourcing
- CVE-2016-8950IBM Emptoris Sourcing 9.5.x through 10.1.x is vulnerable to cross-site scripting.IBM Emptoris Sourcing
- CVE-2016-8953IBM Emptoris Sourcing 9.5.x through 10.1.x could allow a remote attacker to conduct phishing attacks, using an open redirect attack.IBM Emptoris Sourcing
- CVE-2017-1285IBM WebSphere MQ 9.0.1 and 9.0.2 could allow an authenticated user with authority to send a specially crafted message that would cause a chaIBM MQ
- CVE-2017-1321IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to cross-site scripting.IBM InfoSphere Information Server
- CVE-2017-11189unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash), w
- CVE-2017-11190unrarlib.c in unrar-free 0.0.1, when _DEBUG_LOG mode is enabled, might allow remote attackers to cause a denial of service (stack-based buff
- CVE-2017-9843SAP NetWeaver AS ABAP 7.40 allows remote authenticated users with certain privileges to cause a denial of service (process crash) via vector
- CVE-2017-9844SAP NetWeaver 7400.12.21.30308 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted serial
- CVE-2017-9845disp+work 7400.12.21.30308 in SAP NetWeaver 7.40 allows remote attackers to cause a denial of service (resource consumption) via a crafted D
- CVE-2017-9977AVG AntiVirus for MacOS with scan engine before 4668 might allow remote attackers to bypass malware detection by leveraging failure to scan
- CVE-2017-11188The ReadDPXImage function in coders\dpx.c in ImageMagick 7.0.6-0 has a large loop vulnerability that can cause CPU exhaustion via a crafted
- CVE-2017-4052Authentication Bypass vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthentMcAfee Advanced Threat Defense
- CVE-2017-4053Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote unauthenticatMcAfee Advanced Threat Defense
- CVE-2017-4054Command Injection vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticatedMcAfee Advanced Threat Defense
- CVE-2017-4055Exploitation of Authentication vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote McAfee Advanced Threat Defense
- CVE-2017-4057Privilege Escalation vulnerability in the web interface in McAfee Advanced Threat Defense (ATD) 3.10, 3.8, 3.6, 3.4 allows remote authenticaMcAfee Advanced Threat Defense
- CVE-2017-11187phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly.
- CVE-2016-8638A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log ipsilon
- CVE-2017-11167FineCMS 2.1.0 allows remote attackers to execute arbitrary PHP code by using a URL Manager "Add Site" action to enter this code after a ', s
- CVE-2017-7678In Apache Spark before 2.2.0, it is possible for an attacker to take advantage of a user's trust in the server to trick them into visiting aorg.apache.spark:spark-core_2.11 · org.apache.spark:spark-c…
- CVE-2017-11165dataTaker DT80 dEX 1.50.012 allows remote attackers to obtain sensitive credential and configuration information via a direct request for th
- CVE-2017-11178In FineCMS through 2017-07-11, application/core/controller/style.php allows remote attackers to write to arbitrary files via the contents an
- CVE-2017-11179FineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in route=register when registering a user acco
- CVE-2017-11180FineCMS through 2017-07-11 has stored XSS in the logging functionality, as demonstrated by an XSS payload in (1) the User-Agent header of an
- CVE-2017-11181In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section.
- CVE-2017-11182In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section.