Latest CVE Feed
-
8.8
HIGHCVE-2017-7018
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-7017
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corru... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-7016
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "afclip" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-7015
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Audio" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service (memory corruption) ... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-7014
An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corru... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-7013
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. watchOS before 3.2... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-7012
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. The issue involves the "WebKit Web Inspector" comp... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-7011
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof the address bar via a crafted web site that uses FRAME eleme... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-7010
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
9.3
HIGHCVE-2017-7009
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "IOUSBFamily" component. It allows attackers to ex... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
7.8
HIGHCVE-2017-7008
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. The issue involves the "CoreAudio" component. It allows remote attackers to execute arbitrary code or cause... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
7.5
HIGHCVE-2017-7007
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "EventKitUI" component. It allows remote attackers to cause a denial of service (resource consumption and application crash).... Read more
Affected Products : iphone_os- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
5.3
MEDIUMCVE-2017-7006
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct a timing side-channel atta... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
6.5
MEDIUMCVE-2017-2517
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar via a crafted web site.... Read more
Affected Products : iphone_os- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
7.1
HIGHCVE-2017-11478
The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malformed DJVU image.... Read more
Affected Products : imagemagick- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
9.8
CRITICALCVE-2017-6532
Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20 have cleartext credentials in /mib.db.... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
9.8
CRITICALCVE-2017-6531
On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and LoadCfgFile.... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
9.8
CRITICALCVE-2017-6530
Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20 do not check password.shtml authorization, leading to Arbitrary password change.... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
8.8
HIGHCVE-2017-9822
DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites."... Read more
Affected Products : dotnetnuke- Actively Exploited
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
9.8
CRITICALCVE-2017-9785
Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Cookie.... Read more
Affected Products : nancy- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025