CVEs published July 28, 2017
30 CVEs were published on July 28, 2017: 0 critical, 0 high.
- Published
- 30
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 30
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- NVIDIA Windows GPU Display Driver
- 6
- NVIDIA GPU Display Driver
- 2
- VMware Tools
- 1
- VMware vCenter Server
- 1
Medium, low and unrated 30
- CVE-2017-4919VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest OperatiVMware vCenter Server
- CVE-2015-5191VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded paths under /tmp.VMware Tools
- CVE-2017-6251NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler where a missing permissions check may allow userNVIDIA Windows GPU Display Driver
- CVE-2017-6252NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler where a NULL pointer dereference may lead to a dNVIDIA Windows GPU Display Driver
- CVE-2017-6253NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the size
- CVE-2017-6254NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointerNVIDIA Windows GPU Display Driver
- CVE-2017-6255NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an impropNVIDIA Windows GPU Display Driver
- CVE-2017-6256NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value pNVIDIA Windows GPU Display Driver
- CVE-2017-6257NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a NULL pointer dereference may lead to denial of sNVIDIA GPU Display Driver
- CVE-2017-6259NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect detection and recovery from an invaliNVIDIA GPU Display Driver
- CVE-2017-6260NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer helper function where an incorrect calculation of stringNVIDIA Windows GPU Display Driver
- CVE-2017-11720There is a division-by-zero vulnerability in LAME 3.99.5, caused by a malformed input file.
- CVE-2017-11693MEDHOST Document Management System contains hard-coded credentials that are used for customer database access.
- CVE-2017-11694MEDHOST Document Management System contains hard-coded credentials that are used for Apache Solr access.
- CVE-2017-11722The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (out-of-bounds r
- CVE-2017-11183front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter.
- CVE-2017-11184SQL injection exists in front/devicesoundcard.php in GLPI before 9.1.5 via the start parameter.
- CVE-2017-11645NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html
- CVE-2017-11646NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrate
- CVE-2017-11647NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting
- CVE-2017-11703A memory leak vulnerability was found in the function parseSWF_DOACTION in util/parser.c in Ming 0.4.8, which allows attackers to cause a de
- CVE-2017-11704A heap-based buffer over-read was found in the function decompileIF in util/decompile.c in Ming 0.4.8, which allows attackers to cause a den
- CVE-2017-11705A memory leak was found in the function parseSWF_SHAPEWITHSTYLE in util/parser.c in Ming 0.4.8, which allows attackers to cause a denial of
- CVE-2017-11706The Boozt Fashion application before 2.3.4 for Android allows remote attackers to read login credentials by sniffing the network and leverag
- CVE-2017-11714psi/ztoken.c in Artifex Ghostscript 9.21 mishandles references to the scanner state structure, which allows remote attackers to cause a deni
- CVE-2017-11715job/uploadfile_save.php in MetInfo through 5.3.17 blocks the .php extension but not related extensions, which might allow remote authenticat
- CVE-2017-11716MetInfo through 5.3.17 allows stored XSS via HTML Edit Mode.
- CVE-2017-11717MetInfo through 5.3.17 accepts the same CAPTCHA response for 120 seconds, which makes it easier for remote attackers to bypass intended chal
- CVE-2017-11718There is URL Redirector Abuse in MetInfo through 5.3.17 via the gourl parameter to member/login.php.
- CVE-2017-11719The dnxhd_decode_header function in libavcodec/dnxhddec.c in FFmpeg 3.0 through 3.3.2 allows remote attackers to cause a denial of service (