CVEs

128,995 total · page 2437 of 2,580

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2017-7050	Apple Inc. Mac OS X	Hig	0.52	8.0	0.01		Jul 20, 2017	An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7049	Apple Inc. Safari	Hig	0.61	8.8	0.06		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7048	Apple Inc. Safari	Hig	0.61	8.8	0.07		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7047	Apple Inc. tvOS	Hig	0.61	8.8	0.07		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7046	Apple Inc. Safari	Hig	0.61	8.8	0.07		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7044	Apple Inc. Mac OS X	Hig	0.51	7.8	0.01		Jul 20, 2017	An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7043	Apple Inc. Safari	Hig	0.61	8.8	0.06		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7042	Apple Inc. Safari	Hig	0.61	8.8	0.09		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7041	Apple Inc. Safari	Hig	0.61	8.8	0.10		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7040	Apple Inc. Safari	Hig	0.61	8.8	0.06		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7039	Apple Inc. Safari	Hig	0.61	8.8	0.06		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7037	Apple Inc. Safari	Hig	0.61	8.8	0.08		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7035	Apple Inc. Mac OS X	Hig	0.51	7.8	0.01		Jul 20, 2017	An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7034	Apple Inc. Safari	Hig	0.57	8.8	0.02		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7033	Apple Inc. Mac OS X	Hig	0.51	7.8	0.02		Jul 20, 2017	An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "afclip" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file.
CVE-2017-7032	Apple Inc. Mac OS X	Hig	0.51	7.8	0.01		Jul 20, 2017	An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7031	Apple Inc. Mac OS X	Hig	0.51	7.8	0.02		Jul 20, 2017	An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file.
CVE-2017-7030	Apple Inc. Safari	Hig	0.57	8.8	0.02		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7027	Apple Inc. tvOS	Hig	0.51	7.8	0.01		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7026	Apple Inc. tvOS	Hig	0.51	7.8	0.01		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7025	Apple Inc. tvOS	Hig	0.51	7.8	0.02		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7024	Apple Inc. tvOS	Hig	0.51	7.8	0.02		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7023	Apple Inc. tvOS	Hig	0.51	7.8	0.02		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7022	Apple Inc. tvOS	Hig	0.51	7.8	0.02		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7021	Apple Inc. Mac OS X	Hig	0.51	7.8	0.01		Jul 20, 2017	An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "AppleGraphicsPowerManagement" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a…
CVE-2017-7020	Apple Inc. Safari	Hig	0.57	8.8	0.02		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7019	Apple Inc. Safari	Hig	0.57	8.8	0.02		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit Page…
CVE-2017-7018	Apple Inc. Safari	Hig	0.61	8.8	0.07		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7017	Apple Inc. Mac OS X	Hig	0.51	7.8	0.01		Jul 20, 2017	An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7016	Apple Inc. Mac OS X	Hig	0.51	7.8	0.02		Jul 20, 2017	An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "afclip" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file.
CVE-2017-7015	Apple Inc. Mac OS X	Hig	0.51	7.8	0.01		Jul 20, 2017	An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Audio" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted audio file.
CVE-2017-7014	Apple Inc. Mac OS X	Hig	0.51	7.8	0.01		Jul 20, 2017	An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7013	Apple Inc. iTunes	Hig	0.51	7.8	0.01		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The…
CVE-2017-7012	Apple Inc. Safari	Hig	0.57	8.8	0.02		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit Web Inspector" component. It allows remote…
CVE-2017-7010	Apple Inc. iTunes	Hig	0.51	7.8	0.01		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "libxml2"…
CVE-2017-7009	Apple Inc. tvOS	Hig	0.51	7.8	0.01		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "IOUSBFamily" component. It allows attackers to execute arbitrary code in…
CVE-2017-7008	Apple Inc. tvOS	Hig	0.51	7.8	0.02		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. The issue involves the "CoreAudio" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-7007	Apple Inc. Iphone OS	Hig	0.49	7.5	0.02		Jul 20, 2017	An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "EventKitUI" component. It allows remote attackers to cause a denial of service (resource consumption and application crash).
CVE-2017-9822	Dnnsoftware Dotnetnuke	Hig	0.79	8.8	0.95	KEV	Jul 20, 2017	DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."
CVE-2017-11475	Glpi Project Glpi	Hig	0.57	8.8	0.01		Jul 20, 2017	GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php.
CVE-2017-11473	Linux Kernel	Hig	0.51	7.8	0.00		Jul 20, 2017	Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafted ACPI table.
CVE-2017-11472	Linux Kernel	Hig	0.46	7.1	0.00		Jul 20, 2017	The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection…
CVE-2017-11469	Idera Uptime Monitor	Hig	0.52	7.5	0.05		Jul 20, 2017	get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter.
CVE-2017-9765	Genivia Gsoap	Hig	0.55	8.1	0.42		Jul 20, 2017	Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML…
CVE-2017-11466	Dotcms Dotcms	Hig	0.47	7.2	0.08		Jul 20, 2017	Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated administrators to upload .jsp files to arbitrary locations via directory traversal sequences in the fieldName parameter to…
CVE-2017-11464	GNOME Foundation Librsvg	Hig	0.51	7.8	0.01		Jul 19, 2017	A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.
CVE-2017-1309	IBM Infosphere Master Data Management Server	Hig	0.51	7.8	0.00		Jul 19, 2017	IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 125463.
CVE-2017-1224	IBM Tivoli Endpoint Manager	Hig	0.49	7.5	0.01		Jul 19, 2017	IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 123903.
CVE-2017-1218	IBM Tivoli Endpoint Manager	Hig	0.57	8.8	0.01		Jul 19, 2017	IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 123858.
CVE-2016-7507	Glpi Project Glpi	Hig	0.52	8.0	0.00		Jul 19, 2017	Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application.

CVE-2017-7050HigJul 20, 2017
Apple Inc.
Mac OS X
risk 0.52cvss 8.0epss 0.01
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Bluetooth" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7049HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7048HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7047HigJul 20, 2017
Apple Inc.
tvOS
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "libxpc" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7046HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7044HigJul 20, 2017
Apple Inc.
Mac OS X
risk 0.51cvss 7.8epss 0.01
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7043HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7042HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.09
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7041HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.10
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7040HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7039HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.06
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7037HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.08
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7035HigJul 20, 2017
Apple Inc.
Mac OS X
risk 0.51cvss 7.8epss 0.01
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7034HigJul 20, 2017
Apple Inc.
Safari
risk 0.57cvss 8.8epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7033HigJul 20, 2017
Apple Inc.
Mac OS X
risk 0.51cvss 7.8epss 0.02
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "afclip" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file.
CVE-2017-7032HigJul 20, 2017
Apple Inc.
Mac OS X
risk 0.51cvss 7.8epss 0.01
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "kext tools" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7031HigJul 20, 2017
Apple Inc.
Mac OS X
risk 0.51cvss 7.8epss 0.02
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Foundation" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file.
CVE-2017-7030HigJul 20, 2017
Apple Inc.
Safari
risk 0.57cvss 8.8epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7027HigJul 20, 2017
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.01
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7026HigJul 20, 2017
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.01
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7025HigJul 20, 2017
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7024HigJul 20, 2017
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7023HigJul 20, 2017
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7022HigJul 20, 2017
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a…
CVE-2017-7021HigJul 20, 2017
Apple Inc.
Mac OS X
risk 0.51cvss 7.8epss 0.01
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "AppleGraphicsPowerManagement" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a…
CVE-2017-7020HigJul 20, 2017
Apple Inc.
Safari
risk 0.57cvss 8.8epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7019HigJul 20, 2017
Apple Inc.
Safari
risk 0.57cvss 8.8epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit Page…
CVE-2017-7018HigJul 20, 2017
Apple Inc.
Safari
risk 0.61cvss 8.8epss 0.07
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.…
CVE-2017-7017HigJul 20, 2017
Apple Inc.
Mac OS X
risk 0.51cvss 7.8epss 0.01
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7016HigJul 20, 2017
Apple Inc.
Mac OS X
risk 0.51cvss 7.8epss 0.02
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "afclip" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file.
CVE-2017-7015HigJul 20, 2017
Apple Inc.
Mac OS X
risk 0.51cvss 7.8epss 0.01
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Audio" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) via a crafted audio file.
CVE-2017-7014HigJul 20, 2017
Apple Inc.
Mac OS X
risk 0.51cvss 7.8epss 0.01
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2017-7013HigJul 20, 2017
Apple Inc.
iTunes
risk 0.51cvss 7.8epss 0.01
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The…
CVE-2017-7012HigJul 20, 2017
Apple Inc.
Safari
risk 0.57cvss 8.8epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit Web Inspector" component. It allows remote…
CVE-2017-7010HigJul 20, 2017
Apple Inc.
iTunes
risk 0.51cvss 7.8epss 0.01
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "libxml2"…
CVE-2017-7009HigJul 20, 2017
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.01
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "IOUSBFamily" component. It allows attackers to execute arbitrary code in…
CVE-2017-7008HigJul 20, 2017
Apple Inc.
tvOS
risk 0.51cvss 7.8epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. The issue involves the "CoreAudio" component. It allows remote attackers to execute arbitrary code or cause a denial of service…
CVE-2017-7007HigJul 20, 2017
Apple Inc.
Iphone OS
risk 0.49cvss 7.5epss 0.02
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "EventKitUI" component. It allows remote attackers to cause a denial of service (resource consumption and application crash).
CVE-2017-9822HigKEVJul 20, 2017
Dnnsoftware
Dotnetnuke
risk 0.79cvss 8.8epss 0.95
DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."
CVE-2017-11475HigJul 20, 2017
Glpi Project
Glpi
risk 0.57cvss 8.8epss 0.01
GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php.
CVE-2017-11473HigJul 20, 2017
Linux
Kernel
risk 0.51cvss 7.8epss 0.00
Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users to gain privileges via a crafted ACPI table.
CVE-2017-11472HigJul 20, 2017
Linux
Kernel
risk 0.46cvss 7.1epss 0.00
The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and causes a kernel stack dump, which allows local users to obtain sensitive information from kernel memory and bypass the KASLR protection…
CVE-2017-11469HigJul 20, 2017
Idera
Uptime Monitor
risk 0.52cvss 7.5epss 0.05
get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file_name parameter.
CVE-2017-9765HigJul 20, 2017
Genivia
Gsoap
risk 0.55cvss 8.1epss 0.42
Integer overflow in the soap_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow and application crash) via a large XML…
CVE-2017-11466HigJul 20, 2017
Dotcms
Dotcms
risk 0.47cvss 7.2epss 0.08
Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated administrators to upload .jsp files to arbitrary locations via directory traversal sequences in the fieldName parameter to…
CVE-2017-11464HigJul 19, 2017
GNOME Foundation
Librsvg
risk 0.51cvss 7.8epss 0.01
A SIGFPE is raised in the function box_blur_line of rsvg-filter.c in GNOME librsvg 2.40.17 during an attempted parse of a crafted SVG file, because of incorrect protection against division by zero.
CVE-2017-1309HigJul 19, 2017
IBM
Infosphere Master Data Management Server
risk 0.51cvss 7.8epss 0.00
IBM InfoSphere Master Data Management Server 11.0 - 11.6 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 125463.
CVE-2017-1224HigJul 19, 2017
IBM
Tivoli Endpoint Manager
risk 0.49cvss 7.5epss 0.01
IBM Tivoli Endpoint Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 123903.
CVE-2017-1218HigJul 19, 2017
IBM
Tivoli Endpoint Manager
risk 0.57cvss 8.8epss 0.01
IBM Tivoli Endpoint Manager is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 123858.
CVE-2016-7507HigJul 19, 2017
Glpi Project
Glpi
risk 0.52cvss 8.0epss 0.00
Cross-Site Request Forgery (CSRF) vulnerability in GLPI 0.90.4 allows remote authenticated attackers to submit a request that could lead to the creation of an admin account in the application.