Browse CVEs

MEDIUM 6.5 CVE-2017-8611EPSS 11% Microsoft Edge on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows remote attackers to spoof web content via a crafted… Edge Patch available Fix from $1,6002017-07-11 HIGH 7.0 CVE-2017-8566 Microsoft Windows 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows Input Method Editor (IME) imprope… Windows 10 Patch available Fix from $1,9502017-07-11 HIGH 7.5 CVE-2017-8585EPSS 9% Microsoft .NET Framework 4.6, 4.6.1, 4.6.2, and 4.7 allow an attacker to send specially crafted requests to a .NET web application, resulting in deni… .net Framework Patch available Fix from $1,9502017-07-11 HIGH 7.5 CVE-2017-7730 iSmartAlarm cube devices allow Denial of Service. Sending a SYN flood on port 12345 will freeze the "cube" and it will stop responding. Cubeone Firmware No fix yet Fix from $1,9502017-07-11 MEDIUM 5.3 CVE-2017-6727 A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote atta… Wide Area Application Services Mitigation only Fix from $1,6002017-07-10 MEDIUM 6.7 CVE-2017-6735 A vulnerability in the backup and restore functionality of Cisco FireSIGHT System Software could allow an authenticated, local attacker to execute ar… Firesight System Software Mitigation only Fix from $1,6002017-07-10 CRITICAL 9.8 CVE-2017-9791 KEVEPSS 99% The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the Act… Struts Patch available Fix from $2,3002017-07-10 HIGH 7.5 CVE-2016-10397 In PHP before 5.6.28 and 7.x before 7.0.13, incorrect handling of various URI components in the URL parser could be used by attackers to bypass hostn… PHP after 5.6.27 Fix from $1,9502017-07-10 HIGH 7.5 CVE-2017-11112 In ncurses 6.0, there is an attempted 0xffffffffffffffff access in the append_acs function of tinfo/parse_entry.c. It could lead to a remote denial o… Ncurses Mitigation only Fix from $1,9502017-07-08 MEDIUM 5.9 CVE-2017-11104 Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valid key na… Debian Linux after 2.4.4 Fix from $1,6002017-07-08 HIGH 8.8 CVE-2017-11098 When SWFTools 0.9.2 processes a crafted file in png2swf, it can lead to a Segmentation Violation in the png_load() function in lib/png.c. Swftools No fix yet Fix from $1,9502017-07-07 HIGH 8.8 CVE-2017-11099 When SWFTools 0.9.2 processes a crafted file in wav2swf, it can lead to a Segmentation Violation in the wav_convert2mono() function in lib/wav.c. Swftools No fix yet Fix from $1,9502017-07-07 HIGH 7.5 CVE-2017-11102 The ReadOneJNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (application crash) during… Graphicsmagick Patch available Fix from $1,9502017-07-07 MEDIUM 5.5 CVE-2017-7950 Nitro Pro 11.0.3 and earlier allows remote attackers to cause a denial of service (application crash) via a crafted PCX file. Nitro Pro after 11.0.3 Fix from $1,6002017-07-07 MEDIUM 5.5 CVE-2017-0689 A denial of service vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID… Android Mitigation only Fix from $1,6002017-07-06 MEDIUM 5.5 CVE-2017-0694 A denial of service vulnerability in the Android media framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. And… Android No fix yet Fix from $1,6002017-07-06 MEDIUM 5.5 CVE-2017-0696 A denial of service vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37207120. Android Mitigation only Fix from $1,6002017-07-06 HIGH 7.8 CVE-2017-0665 A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Andr… Android Mitigation only Fix from $1,9502017-07-06 HIGH 7.8 CVE-2017-0667 A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID:… Android Mitigation only Fix from $1,9502017-07-06 MEDIUM 5.5 CVE-2017-0672 A denial of service vulnerability in the Android libraries. Product: Android. Versions: 7.0, 7.1.1, 7.1.2. Android ID: A-34778578. Android No fix yet Fix from $1,6002017-07-06 HIGH 7.8 CVE-2017-0674 A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-342311… Android Patch available Fix from $1,9502017-07-06 HIGH 7.8 CVE-2017-0675 A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34779227. Android Patch available Fix from $1,9502017-07-06 HIGH 7.8 CVE-2017-0676 A remote code execution vulnerability in the Android media framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Androi… Android Mitigation only Fix from $1,9502017-07-06 HIGH 7.5 CVE-2017-9524 The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows remote attackers to cause a d… Debian Linux after 2.9.1 Fix from $1,9502017-07-06 MEDIUM 6.5 CVE-2017-1236 IBM WebSphere MQ 9.0.2 could allow an authenticated user to potentially cause a denial of service by saving an incorrect channel status inquiry. IBM … Websphere Mq Mitigation only Fix from $1,6002017-07-06 CRITICAL 10.0 CVE-2017-10918 Xen through 4.8.x does not validate memory allocations during certain P2M operations, which allows guest OS users to obtain privileged host OS access… Xen after 4.8.1 Fix from $2,3002017-07-05 MEDIUM 6.5 CVE-2017-10923 Xen through 4.8.x does not validate a vCPU array index upon the sending of an SGI, which allows guest OS users to cause a denial of service (hypervis… Xen Mitigation only Fix from $1,6002017-07-05 MEDIUM 6.7 CVE-2017-6718 A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level. More Inform… Ios Xr Mitigation only Fix from $1,6002017-07-04 MEDIUM 6.7 CVE-2017-6719 A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating … Ios Xr Mitigation only Fix from $1,6002017-07-04 MEDIUM 5.3 CVE-2017-6721 A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, re… Wide Area Application Services Mitigation only Fix from $1,6002017-07-04