CVEs published July 22, 2017
13 CVEs were published on July 22, 2017: 0 critical, 0 high.
- Published
- 13
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Sony WG-C10
- 3
- BUFFALO WMR-433 · BUFFALO WMR-433W
- 2
- Inmarsat AmosConnect
- 2
- BUFFALO WAPM-1166D · BUFFALO WAPM-APG600H
- 1
- Fortinet FortiWLM
- 1
Medium, low and unrated 13
- CVE-2017-11522The WriteOnePNGImage function in coders/png.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a deni
- CVE-2017-11523The ReadTXTImage function in coders/txt.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial o
- CVE-2017-7336A hard-coded account named 'upgrade' in Fortinet FortiWLM 8.3.0 and lower versions allows a remote attacker to log-in and execute commands wFortinet FortiWLM
- CVE-2017-3221Blind SQL injection in Inmarsat AmosConnect 8 login form allows remote attackers to access user credentials, including user names and passwoInmarsat AmosConnect
- CVE-2017-3222Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commInmarsat AmosConnect
- CVE-2017-11521The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a den
- CVE-2016-10400Directory Traversal exists in ATutor before 2.2.2 via the icon parameter to /mods/_core/courses/users/create_course.php.
- CVE-2017-2126WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication andBUFFALO WAPM-1166D · BUFFALO WAPM-APG600H
- CVE-2017-2273Cross-site request forgery (CSRF) vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remoBUFFALO WMR-433 · BUFFALO WMR-433W
- CVE-2017-2274Cross-site scripting vulnerability in WMR-433 firmware Ver.1.02 and earlier, WMR-433W firmware Ver.1.40 and earlier allows remote attackers BUFFALO WMR-433 · BUFFALO WMR-433W
- CVE-2017-2275WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.Sony WG-C10
- CVE-2017-2276Buffer overflow in WG-C10 v3.0.79 and earlier allows an attacker to execute arbitrary commands via unspecified vectors.Sony WG-C10
- CVE-2017-2277WG-C10 v3.0.79 and earlier allows an attacker to bypass access restrictions to obtain or alter information stored in the external storage coSony WG-C10