CVEs published August 10, 2017
25 CVEs were published on August 10, 2017: 0 critical, 1 high.
- Published
- 25
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 9
Most affected products
- Apache Software Foundation Apache Tomcat · org.apache.tomca…
- 5
- Apache Software Foundation Apache CXF · org.apache.cxf:cxf-…
- 2
- IBM Sterling B2B Integrator
- 2
- Apache Software Foundation Apache CXF · org.apache.cxf.kara…
- 1
- Apache Software Foundation Apache Tomcat · org.apache.to… +2
- 1
- Fortinet FortiOS
- 1
- Fortinet FortiWeb
- 1
- IBM Rational Engineering Lifecycle Manager
- 1
- IBM Runbook Automation
- 1
- IBM Streams
- 1
High 1
Medium, low and unrated 24
- CVE-2016-6797The ResourceLinkFactory implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0Apache Software Foundation Apache Tomcat · org.apache.tomca…
- CVE-2016-8745A bug in the error handling of the send file code for the NIO HTTP connector in Apache Tomcat 9.0.0.M1 to 9.0.0.M13, 8.5.0 to 8.5.8, 8.0.0.RApache Software Foundation Apache Tomcat · org.apache.tomca…
- CVE-2017-3130An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by iFortinet FortiOS
- CVE-2017-7737An information disclosure vulnerability in Fortinet FortiWeb 5.8.2 and below versions allows logged-in admin user to view SNMPv3 user passwoFortinet FortiWeb
- CVE-2016-8739The JAX-RS module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 provides a number of Atom JAX-RS MessageBodyReaders.Apache Software Foundation Apache CXF · org.apache.cxf:cxf-…
- CVE-2017-12798Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the q parameter to searchsuggest.php.
- CVE-2017-12799The elf_read_notesfunction in bfd/elf.c in GNU Binutils 2.29 allows remote attackers to cause a denial of service (buffer overflow and appli
- CVE-2017-3156The OAuth2 Hawk and JOSE MAC Validation code in Apache CXF prior to 3.0.13 and 3.1.x prior to 3.1.10 is not using a constant time MAC signatApache Software Foundation Apache CXF · org.apache.cxf.kara…
- CVE-2017-8518Microsoft Edge allows a remote code execution vulnerability due to the way it accesses objects in memory, aka "Scripting Engine Memory CorruMicrosoft Edge
- CVE-2016-0762The Realm implementations in Apache Tomcat versions 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to Apache Software Foundation Apache Tomcat · org.apache.tomca…
- CVE-2016-5018In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a malicious web application Apache Software Foundation Apache Tomcat · org.apache.to… +2
- CVE-2016-6794When a SecurityManager is configured, a web application's ability to read system properties should be controlled by the SecurityManager.Apache Software Foundation Apache Tomcat · org.apache.tomca…
- CVE-2016-6812The HTTP transport module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 uses FormattedServiceListWriter to provide an HTML page whiApache Software Foundation Apache CXF · org.apache.cxf:cxf-…
- CVE-2014-0142QEMU, possibly before 2.0.0, allows local users to cause a denial of service (divide-by-zero error and crash) via a zero value in the (1) tr
- CVE-2014-0143Multiple integer overflows in the block drivers in QEMU, possibly before 2.0.0, allow local users to cause a denial of service (crash) via a
- CVE-2014-0145Multiple buffer overflows in QEMU before 1.7.2 and 2.x before 2.0.0, allow local users to cause a denial of service (crash) or possibly exec
- CVE-2014-0146The qcow2_open function in the (block/qcow2.c) in QEMU before 1.7.2 and 2.x before 2.0.0 allows local users to cause a denial of service (NU
- CVE-2017-1168IBM Rational Engineering Lifecycle Manager 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting.IBM Rational Engineering Lifecycle Manager
- CVE-2017-1174IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to SQL injection.IBM Sterling B2B Integrator
- CVE-2017-1192IBM Sterling B2B Integrator 5.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data.IBM Sterling B2B Integrator
- CVE-2017-1377IBM Runbook Automation reveals sensitive information in error messages that could be used in further attacks against the system.IBM Runbook Automation
- CVE-2017-1431IBM InfoSphere Streams 4.0, 4.1, and 4.2 is vulnerable to cross-site scripting.IBM Streams
- CVE-2017-3751An unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB Keyboard with TrackPoint versions earlier tLenovo Group ThinkPad Compact USB Keyboard with TrackPoint…
- CVE-2017-3753A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc.Lenovo Group Desktop and Notebook BIOS