Security Vulnerabilities - CVEs Published In June 2017
Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a denial of service (memory corruption and crash) via a crafted .m4a file.
CVSS Score
6.5
EPSS Score
0.005
Published
2017-06-06
The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows remote attackers to trick a victim by displaying a malicious page for legitimate domain names.
CVSS Score
6.5
EPSS Score
0.002
Published
2017-06-06
The Fedora Nagios package uses "nagiosadmin" as the default password for the "nagiosadmin" administrator account, which makes it easier for remote attackers to obtain access by leveraging knowledge of the credentials.
CVSS Score
9.8
EPSS Score
0.004
Published
2017-06-06
PostgreSQL PL/Java before 1.5.0 allows remote authenticated users with USAGE permission on the public schema to alter the public schema classpath.
CVSS Score
6.5
EPSS Score
0.001
Published
2017-06-06
PostgreSQL PL/Java after 9.0 does not honor access controls on large objects.
CVSS Score
7.5
EPSS Score
0.002
Published
2017-06-06
PostgreSQL PL/Java before 1.5.0 allows remote authenticated users to alter type mappings for types they do not own.
CVSS Score
6.5
EPSS Score
0.001
Published
2017-06-06
The spice-gtk widget allows remote authenticated users to obtain information from the host clipboard.
CVSS Score
6.5
EPSS Score
0.003
Published
2017-06-06
The VersionMapper.fromKernelVersionString method in oVirt Engine allows remote authenticated users to cause a denial of service (process crash) for all VMs.
CVSS Score
6.5
EPSS Score
0.004
Published
2017-06-06
The Content-Encoding HTTP header feature in ws-xmlrpc 3.1.3 as used in Apache Archiva allows remote attackers to cause a denial of service (resource consumption) by decompressing a large file containing zeroes.
CVSS Score
6.5
EPSS Score
0.015
Published
2017-06-06
game-music-emu before 0.6.1 allows local users to cause a denial of service (divide by zero and process crash).
CVSS Score
5.5
EPSS Score
0.001
Published
2017-06-06