CVEs published August 22, 2017
26 CVEs were published on August 22, 2017: 0 critical, 0 high.
- Published
- 26
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 26
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- IBM MaaS360 DTM
- 1
- org.springframework.social:spring-social-core
- 1
- Red Hat dnsdist
- 1
Medium, low and unrated 26
- CVE-2017-1422IBM MaaS360 DTM all versions up to 3.81 does not perform proper verification for user rights of certain applications which could disclose seIBM MaaS360 DTM
- CVE-2015-5258Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3.org.springframework.social:spring-social-core
- CVE-2015-6472WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management.
- CVE-2015-6473WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation.
- CVE-2016-2102HAProxy statistics in openstack-tripleo-image-elements are non-authenticated over the network.
- CVE-2016-4460Apache Pony Mail 0.6c through 0.8b allows remote attackers to bypass authentication.
- CVE-2016-6310oVirt Engine discloses the ENGINE_HTTPS_PKI_TRUST_STORE_PASSWORD in /var/log/ovirt-engine/engine.log file in RHEV before 4.0.
- CVE-2016-6311Get requests in JBoss Enterprise Application Platform (EAP) 7 disclose internal IP addresses to remote attackers.
- CVE-2017-5208Integer overflow in the wrestool program in icoutils before 0.31.1 allows remote attackers to cause a denial of service (memory corruption)
- CVE-2017-12785The novish command-line interface, included in the NoviWare software distribution through NW400.2.6 and deployed on NoviSwitch devices, is p
- CVE-2017-12786Network interfaces of the cliengine and noviengine services, included in the NoviWare software distribution through NW400.2.6 and deployed o
- CVE-2017-12787A network interface of the novi_process_manager_daemon service, included in the NoviWare software distribution through NW400.2.6 and deploye
- CVE-2014-6189Cross-site scripting (XSS) vulnerability in IBM Security Network Protection 3100, 4100, 5100, and 7100 devices with firmware 5.2 before 5.2.
- CVE-2015-2857Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metacharacters in the oaut
- CVE-2015-3617Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI commands.
- CVE-2017-12843Cyrus IMAP before 3.0.3 allows remote authenticated users to write to arbitrary files via a crafted (1) SYNCAPPLY, (2) SYNCGET or (3) SYNCRE
- CVE-2017-7557dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.Red Hat dnsdist
- CVE-2017-13058In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WritePCXImage in coders/pcx.c, which allows attackers to cause
- CVE-2017-13059In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function WriteOneJNGImage in coders/png.c, which allows attackers to ca
- CVE-2017-13060In ImageMagick 7.0.6-5, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause
- CVE-2017-13061In ImageMagick 7.0.6-5, a length-validation vulnerability was found in the function ReadPSDLayersInternal in coders/psd.c, which allows atta
- CVE-2017-13062In ImageMagick 7.0.6-6, a memory leak vulnerability was found in the function formatIPTC in coders/meta.c, which allows attackers to cause a
- CVE-2017-13063GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:314:12.
- CVE-2017-13064GraphicsMagick 1.3.26 has a heap-based buffer overflow vulnerability in the function GetStyleTokens in coders/svg.c:311:12.
- CVE-2017-13065GraphicsMagick 1.3.26 has a NULL pointer dereference vulnerability in the function SVGStartElement in coders/svg.c.
- CVE-2017-13066GraphicsMagick 1.3.26 has a memory leak vulnerability in the function CloneImage in magick/image.c.