CVEs published August 1, 2017
29 CVEs were published on August 1, 2017: 0 critical, 0 high.
- Published
- 29
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 29
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Microsoft Office
- 3
- Trend Micro Deep Discovery Director
- 3
- mantisbt/mantisbt
- 2
- IBM Worklight
- 1
Medium, low and unrated 29
- CVE-2017-8571Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allowsMicrosoft Office
- CVE-2017-8572Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allowsMicrosoft Office
- CVE-2017-8663Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allowsMicrosoft Office
- CVE-2017-1500A Reflected Cross Site Scripting (XSS) vulnerability exists in the authorization function exposed by RESTful Web Api of IBM Worklight FramewIBM Worklight
- CVE-2017-12132The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP re
- CVE-2017-4921VMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that occurs due to the use of LD_LIBRARY_PATH variabl
- CVE-2017-4922VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the service startup script using world writable
- CVE-2017-4923VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability.
- CVE-2017-11379Configuration and database backup archives are not signed or validated in Trend Micro Deep Discovery Director 1.1.Trend Micro Deep Discovery Director
- CVE-2017-11380Backup archives were found to be encrypted with a static password across different installations, which suggest the same password may be useTrend Micro Deep Discovery Director
- CVE-2017-11381A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can accTrend Micro Deep Discovery Director
- CVE-2017-12061An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x before 2.5.2.mantisbt/mantisbt
- CVE-2017-12062An XSS issue was discovered in manage_user_page.php in MantisBT 2.x before 2.5.2.mantisbt/mantisbt
- CVE-2015-5059The "Project Documentation" feature in MantisBT 1.2.19 and earlier, when the threshold to access files ($g_view_proj_doc_threshold) is set t
- CVE-2017-11129An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android.
- CVE-2017-11130An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop.
- CVE-2017-11131An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop.
- CVE-2017-11132An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android.
- CVE-2017-11133An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop.
- CVE-2017-11134An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android.
- CVE-2017-11135An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop.
- CVE-2017-11136An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop.
- CVE-2017-11552mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of s
- CVE-2017-12064The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restr
- CVE-2017-12065spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end pa
- CVE-2017-12066Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti before 1.1.16 allows remote authenticated users to inject arbitrar
- CVE-2017-12067Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c.
- CVE-2017-12068The Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin.php in an el_admin_categories delete_bulk ac
- CVE-2017-12131The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonial