CVEs published July 18, 2017
28 CVEs were published on July 18, 2017: 0 critical, 0 high.
- Published
- 28
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 28
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Biscom Secure File Transfer
- 2
- IBM MQ Appliance
- 1
- The SPICE Project spice
- 1
Medium, low and unrated 28
- CVE-2017-11406In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the DOCSIS dissector could go into an infinite loop.
- CVE-2017-11407In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the MQ dissector could crash.
- CVE-2017-11408In Wireshark 2.2.0 to 2.2.7 and 2.0.0 to 2.0.13, the AMQP dissector could crash.
- CVE-2017-11409In Wireshark 2.0.0 to 2.0.13, the GPRS LLC dissector could go into a large loop.
- CVE-2017-11410In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the WBXML dissector could go into an infinite loop, triggered by packet injection or a
- CVE-2017-11411In Wireshark through 2.0.13 and 2.2.x through 2.2.7, the openSAFETY dissector could crash or exhaust system memory.
- CVE-2017-10708An issue was discovered in Apport through 2.20.x.
- CVE-2017-11423The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers t
- CVE-2017-11421gnome-exe-thumbnailer before 0.9.5 is prone to a VBScript Injection when generating thumbnails for MSI files, aka the "Bad Taste" issue.
- CVE-2017-5246Biscom Secure File Transfer is vulnerable to AngularJS expression injection in the Display Name field.Biscom Secure File Transfer
- CVE-2017-5247Biscom Secure File Transfer is vulnerable to cross-site scripting in the File Name field.Biscom Secure File Transfer
- CVE-2017-7506spice versions though 0.13 are vulnerable to out-of-bounds memory access when processing specially crafted messages from authenticated attacThe SPICE Project spice
- CVE-2017-10961REDCap before 7.5.1 has CSRF in the deletion feature of the File Repository and File Upload components.
- CVE-2017-10962REDCap before 7.5.1 has XSS via the query string.
- CVE-2017-6320A remote command injection vulnerability exists in the Barracuda Load Balancer product line (confirmed on v5.4.0.004 (2015-11-26) and v6.0.1
- CVE-2017-1318IBM MQ Appliance 8.0 and 9.0 could allow an authenticated messaging administrator to execute arbitrary commands on the system, caused by comIBM MQ Appliance
- CVE-2017-11412Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/controller/comment_status.php via $_GET['id'].
- CVE-2017-11413Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/comment_status.php via $_GET['id'].
- CVE-2017-11414Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_comment/sys_comment.php via $_POST['comment'], $_POST['name'], $_POST['web'], $_POST['ema
- CVE-2017-11415Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/sys_article.php via $_POST['parent_id'], $_POST['desc'], $_POST['keys'], and $_PO
- CVE-2017-11416Fiyo CMS 2.0.7 has SQL injection in /apps/app_comment/controller/insert.php via the name parameter.
- CVE-2017-11417Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_status.php via $_GET['id'].
- CVE-2017-11418Fiyo CMS 2.0.7 has SQL injection in dapur/apps/app_article/controller/article_list.php via $_GET['cat'], $_GET['user'], $_GET['level'], and
- CVE-2017-11419Fiyo CMS 2.0.7 has SQL injection in /apps/app_article/controller/editor.php via $_POST['id'] and $_POST['art_title'].
- CVE-2017-11420Stack-based buffer overflow in ASUS_Discovery.c in networkmap in Asuswrt-Merlin firmware for ASUS devices and ASUS firmware for ASUS RT-AC53
- CVE-2017-11403The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 has an out-of-order CloseBlob call, resulting in a use-after-free via a c
- CVE-2017-11404In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a FileManager action to admin/moduleinterfa
- CVE-2017-11405In CMS Made Simple (CMSMS) 2.2.2, remote authenticated administrators can upload a .php file via a CMSContentManager action to admin/modulei