2017 CVEs (page 145)
Page 145 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-2767 | Critical | 9.8 | 2017-02-03 | EMC Network Configuration Manager (NCM) 9.3.x, EMC Network Configuration Manager (NCM) 9.4.0.x, EMC Network Configuration Manager (NCM) 9.4.1.x, EMC Network Co… |
CVE-2017-2766 | Critical | 9.8 | 2017-02-03 | EMC Documentum eRoom version 7.4.4, EMC Documentum eRoom version 7.4.4 SP1, EMC Documentum eRoom version prior to 7.4.5 P04, EMC Documentum eRoom version prior… |
CVE-2017-1093 | High | 7.8 | 2017-02-02 | IBM AIX 6.1, 7.1, and 7.2 could allow a local user to exploit a vulnerability in the bellmail binary to gain root privileges. |
CVE-2017-5600 | Critical | 9.8 | 2017-02-02 | The Data Warehouse component in NetApp OnCommand Insight before 7.2.3 allows remote attackers to obtain administrative access by leveraging a default privilege… |
CVE-2017-5219 | Critical | 9.8 | 2017-02-02 | An issue was discovered in SageCRM 7.x before 7.3 SP3. The Component Manager functionality, provided by SageCRM, permits additional components to be added to t… |
CVE-2017-5218 | High | 8.8 | 2017-02-02 | A SQL Injection issue was discovered in SageCRM 7.x before 7.3 SP3. The AP_DocumentUI.asp web resource includes Utilityfuncs.js when the file is opened or view… |
CVE-2017-5630 | High | 7.5 | 2017-02-01 | PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remot… |
CVE-2017-3792 | Critical | 9.8 | 2017-02-01 | A vulnerability in a proprietary device driver in the kernel of Cisco TelePresence Multipoint Control Unit (MCU) Software could allow an unauthenticated, remot… |
CVE-2017-3791 | Critical | 10.0 | 2017-02-01 | A vulnerability in the web-based GUI of Cisco Prime Home could allow an unauthenticated, remote attacker to bypass authentication and execute actions with admi… |
CVE-2017-3790 | High | 8.6 | 2017-02-01 | A vulnerability in the received packet parser of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) software could allow an unauth… |
CVE-2017-3823 | High | 8.8 | 2017-02-01 | An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Container before 106 on Mozilla Firefox, the… |
CVE-2017-5573 | Medium | 4.9 | 2017-01-30 | An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can cancel tasks of other administra… |
CVE-2017-5572 | Medium | 6.5 | 2017-01-30 | An issue was discovered in Linux Foundation xapi in Citrix XenServer through 7.0. An authenticated read-only administrator can corrupt the host database. |
CVE-2017-5632 | Medium | 6.5 | 2017-01-30 | An issue was discovered on the ASUS RT-N56U Wireless Router with Firmware 3.0.0.4.374_979. When executing an "nmap -O" command that specifies an IP address of… |
CVE-2017-5628 | High | 7.8 | 2017-01-30 | An issue was discovered in Artifex Software, Inc. MuJS before 8f62ea10a0af68e56d5c00720523ebcba13c2e6a. The MakeDay function in jsdate.c does not validate the… |
CVE-2017-5627 | High | 7.8 | 2017-01-30 | An issue was discovered in Artifex Software, Inc. MuJS before 4006739a28367c708dea19aeb19b8a1a9326ce08. The jsR_setproperty function in jsrun.c lacks a check f… |
CVE-2017-5612 | Medium | 6.1 | 2017-01-30 | Cross-site scripting (XSS) vulnerability in wp-admin/includes/class-wp-posts-list-table.php in the posts list table in WordPress before 4.7.2 allows remote att… |
CVE-2017-5611 | Critical | 9.8 | 2017-01-30 | SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands b… |
CVE-2017-5610 | Medium | 5.3 | 2017-01-30 | wp-admin/includes/class-wp-press-this.php in Press This in WordPress before 4.7.2 does not properly restrict visibility of a taxonomy-assignment user interface… |
CVE-2017-5609 | High | 8.8 | 2017-01-28 | SQL injection vulnerability in include/functions_entries.inc.php in Serendipity 2.0.5 allows remote authenticated users to execute arbitrary SQL commands via t… |
CVE-2017-5608 | Medium | 6.1 | 2017-01-28 | Cross-site scripting (XSS) vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via… |
CVE-2017-5486 | Critical | 9.8 | 2017-01-28 | The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print(). |
CVE-2017-5485 | Critical | 9.8 | 2017-01-28 | The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in addrtoname.c:lookup_nsap(). |
CVE-2017-5484 | Critical | 9.8 | 2017-01-28 | The ATM parser in tcpdump before 4.9.0 has a buffer overflow in print-atm.c:sig_print(). |
CVE-2017-5483 | Critical | 9.8 | 2017-01-28 | The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1_parse(). |
CVE-2017-5482 | Critical | 9.8 | 2017-01-28 | The Q.933 parser in tcpdump before 4.9.0 has a buffer overflow in print-fr.c:q933_print(), a different vulnerability than CVE-2016-8575. |
CVE-2017-5342 | Critical | 9.8 | 2017-01-28 | In tcpdump before 4.9.0, a bug in multiple protocol parsers (Geneve, GRE, NSH, OTV, VXLAN and VXLAN GPE) could cause a buffer overflow in print-ether.c:ether_p… |
CVE-2017-5341 | Critical | 9.8 | 2017-01-28 | The OTV parser in tcpdump before 4.9.0 has a buffer overflow in print-otv.c:otv_print(). |
CVE-2017-5205 | Critical | 9.8 | 2017-01-28 | The ISAKMP parser in tcpdump before 4.9.0 has a buffer overflow in print-isakmp.c:ikev2_e_print(). |
CVE-2017-5204 | Critical | 9.8 | 2017-01-28 | The IPv6 parser in tcpdump before 4.9.0 has a buffer overflow in print-ip6.c:ip6_print(). |
CVE-2017-5203 | Critical | 9.8 | 2017-01-28 | The BOOTP parser in tcpdump before 4.9.0 has a buffer overflow in print-bootp.c:bootp_print(). |
CVE-2017-5202 | Critical | 9.8 | 2017-01-28 | The ISO CLNS parser in tcpdump before 4.9.0 has a buffer overflow in print-isoclns.c:clnp_print(). |
CVE-2017-5601 | High | 7.5 | 2017-01-27 | An error in the lha_read_file_header_1() function (archive_read_support_format_lha.c) in libarchive 3.2.2 allows remote attackers to trigger an out-of-bounds r… |
CVE-2017-5329 | High | 7.8 | 2017-01-27 | Palo Alto Networks Terminal Services Agent before 7.0.7 allows local users to gain privileges via vectors that trigger an out-of-bounds write operation. |
CVE-2017-5328 | High | 7.5 | 2017-01-27 | Palo Alto Networks Terminal Services Agent before 7.0.7 allows attackers to spoof arbitrary users via unspecified vectors. |
CVE-2017-3443 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 1… |
CVE-2017-3442 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affec… |
CVE-2017-3441 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affec… |
CVE-2017-3440 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affec… |
CVE-2017-3439 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3438 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3437 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3436 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3435 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3433 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3431 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3430 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3429 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3428 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3427 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3426 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3425 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3424 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3423 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3422 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3421 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected ar… |
CVE-2017-3420 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affecte… |
CVE-2017-3419 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affecte… |
CVE-2017-3418 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: User Interface). The supported version that is affecte… |
CVE-2017-3417 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are… |
CVE-2017-3416 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are… |
CVE-2017-3415 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are… |
CVE-2017-3414 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3413 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3412 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3411 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3410 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3409 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3408 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3407 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3406 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3405 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3404 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3403 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3402 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3401 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3400 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3399 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3398 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3397 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3396 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3395 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3394 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3392 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3391 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3390 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3389 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3388 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3387 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3386 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3385 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3384 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3383 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3382 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3381 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3380 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3379 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3378 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3377 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |
CVE-2017-3376 | High | 8.2 | 2017-01-27 | Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affect… |