CVEs published July 20, 2017
87 CVEs were published on July 20, 2017: 1 critical, 1 high. 2 are now in CISA KEV.
- Published
- 87
- Critical
- 1
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 85
- Now in CISA KEV
- 2
- Fix available
- 5
Most affected products
- com.orientechnologies:orientdb-core
- 1
- DotNetNuke CMS Fixed in · DotNetNuke.Core
- 1
- github.com/docker/distribution
- 1
- NancyFX Framework Up to · Nancy
- 1
- phamm before
- 1
- phpmailer/phpmailer
- 1
Critical 1
High 1
Medium, low and unrated 85
- CVE-2017-11468Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remogithub.com/docker/distribution
- CVE-2017-11501NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP.
- CVE-2017-11502Technicolor DPC3928AD DOCSIS devices allow remote attackers to read arbitrary files via a request starting with "GET /../" on TCP port 4321.
- CVE-2017-11503PHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Address" fields of code_generator.php.phpmailer/phpmailer
- CVE-2017-11495PHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; a
- CVE-2017-11500A directory traversal vulnerability exists in MetInfo 5.3.17.
- CVE-2017-0378XSS exists in the login_form function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATH_INFO to main.php.phamm before
- CVE-2017-11478The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a den
- CVE-2017-2517An issue was discovered in certain Apple products.
- CVE-2017-7006An issue was discovered in certain Apple products.
- CVE-2017-7007An issue was discovered in certain Apple products.
- CVE-2017-7008An issue was discovered in certain Apple products.
- CVE-2017-7009An issue was discovered in certain Apple products.
- CVE-2017-7010An issue was discovered in certain Apple products.
- CVE-2017-7011An issue was discovered in certain Apple products.
- CVE-2017-7012An issue was discovered in certain Apple products.
- CVE-2017-7013An issue was discovered in certain Apple products.
- CVE-2017-7014An issue was discovered in certain Apple products.
- CVE-2017-7015An issue was discovered in certain Apple products.
- CVE-2017-7016An issue was discovered in certain Apple products.
- CVE-2017-7017An issue was discovered in certain Apple products.
- CVE-2017-7018An issue was discovered in certain Apple products.
- CVE-2017-7019An issue was discovered in certain Apple products.
- CVE-2017-7020An issue was discovered in certain Apple products.
- CVE-2017-7021An issue was discovered in certain Apple products.
- CVE-2017-7022An issue was discovered in certain Apple products.
- CVE-2017-7023An issue was discovered in certain Apple products.
- CVE-2017-7024An issue was discovered in certain Apple products.
- CVE-2017-7025An issue was discovered in certain Apple products.
- CVE-2017-7026An issue was discovered in certain Apple products.
- CVE-2017-7027An issue was discovered in certain Apple products.
- CVE-2017-7028An issue was discovered in certain Apple products.
- CVE-2017-7029An issue was discovered in certain Apple products.
- CVE-2017-7030An issue was discovered in certain Apple products.
- CVE-2017-7031An issue was discovered in certain Apple products.
- CVE-2017-7032An issue was discovered in certain Apple products.
- CVE-2017-7033An issue was discovered in certain Apple products.
- CVE-2017-7034An issue was discovered in certain Apple products.
- CVE-2017-7035An issue was discovered in certain Apple products.
- CVE-2017-7036An issue was discovered in certain Apple products.
- CVE-2017-7037An issue was discovered in certain Apple products.
- CVE-2017-7038A DOMParser XSS issue was discovered in certain Apple products.
- CVE-2017-7039An issue was discovered in certain Apple products.
- CVE-2017-7040An issue was discovered in certain Apple products.
- CVE-2017-7041An issue was discovered in certain Apple products.
- CVE-2017-7042An issue was discovered in certain Apple products.
- CVE-2017-7043An issue was discovered in certain Apple products.
- CVE-2017-7044An issue was discovered in certain Apple products.
- CVE-2017-7045An issue was discovered in certain Apple products.
- CVE-2017-7046An issue was discovered in certain Apple products.
- CVE-2017-7047An issue was discovered in certain Apple products.
- CVE-2017-7048An issue was discovered in certain Apple products.
- CVE-2017-7049An issue was discovered in certain Apple products.
- CVE-2017-7050An issue was discovered in certain Apple products.
- CVE-2017-7051An issue was discovered in certain Apple products.
- CVE-2017-7052An issue was discovered in certain Apple products.
- CVE-2017-7053An issue was discovered in certain Apple products.
- CVE-2017-7054An issue was discovered in certain Apple products.
- CVE-2017-7055An issue was discovered in certain Apple products.
- CVE-2017-7056An issue was discovered in certain Apple products.
- CVE-2017-7058An issue was discovered in certain Apple products.
- CVE-2017-7059A DOMParser XSS issue was discovered in certain Apple products.
- CVE-2017-7060An issue was discovered in certain Apple products.
- CVE-2017-7061An issue was discovered in certain Apple products.
- CVE-2017-7062An issue was discovered in certain Apple products.
- CVE-2017-7063An issue was discovered in certain Apple products.
- CVE-2017-7064An issue was discovered in certain Apple products.
- CVE-2017-7067An issue was discovered in certain Apple products.
- CVE-2017-7068An issue was discovered in certain Apple products.
- CVE-2017-7069An issue was discovered in certain Apple products.
- CVE-2017-6530Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20 do not check password.shtml authorization, leading to Arbitrary password
- CVE-2017-6531On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile
- CVE-2017-6532Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20 have cleartext credentials in /mib.db.
- CVE-2017-9785Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF CoNancyFX Framework Up to · Nancy
- CVE-2017-11469get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter.
- CVE-2017-11470IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter.
- CVE-2017-11471IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter.
- CVE-2017-11472The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and cause
- CVE-2017-11473Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users t
- CVE-2017-11474GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer_softwareversion.class.php, exploitable via ajax/common.tabs.php.
- CVE-2017-11475GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php.
- CVE-2017-10676On D-Link DIR-600M devices before C1_v3.05ENB01_beta_20170306, XSS was found in the form2userconfig.cgi username parameter.
- CVE-2017-11466Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated adm
- CVE-2017-11467OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attackecom.orientechnologies:orientdb-core
- CVE-2017-9765Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows