LiveActive security incident?Get immediate response
CVE archive

July 2017

Browse CVE records published in July 2017, with severity, affected products, CWE, KEV, and source-backed vulnerability context.

Showing 50 of 1427 matching CVEs · Page 18 of 29.

Unknown · CVSS Not scored

CVE-2017-10804: In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attacker...

In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under certain circumstances because parameters containing 0x00 characters are truncated before reaching the database layer. This occurs because Psycopg 2.x before 2.6.3 is used.

Published Jul 4, 2017 · Updated Aug 5, 2024

Unknown · CVSS Not scored

CVE-2017-10769: XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have...

XnView Classic for Windows Version 2.40 might allow attackers to cause a denial of service or possibly have unspecified other impact via a crafted .rle file, related to "Data from Faulting Address controls Branch Selection starting at ntdll_77df0000!memcmp+0x0000000000000018" (without RPC initialization).

Published Jul 5, 2017 · Updated Aug 5, 2024