2017 CVEs (page 54)
Page 54 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-2701 | Low | 3.3 | 2017-11-22 | Mate 9 with software MHA-AL00AC00B125 has a denial of service (DoS) vulnerability. An attacker tricks a user into installing a malicious application. Since the… |
CVE-2017-2700 | High | 7.5 | 2017-11-22 | AC6005 with software V200R006C10, AC6605 with software V200R006C10 have a DoS Vulnerability. An attacker can send malformed packets to the device, which causes… |
CVE-2017-2699 | High | 7.8 | 2017-11-22 | The Huawei Themes APP in versions earlier than PLK-UL00C17B385, versions earlier than CRR-L09C432B380, versions earlier than LYO-L21C577B128 has a privilege el… |
CVE-2017-2698 | High | 7.8 | 2017-11-22 | The ddr_devfreq driver in versions earlier than GRA-UL00C00B197 has buffer overflow vulnerability. An attacker with the root privilege of the Android system ca… |
CVE-2017-2697 | High | 7.8 | 2017-11-22 | The goldeneye driver in NMO-L31C432B120 and earlier versions,NEM-L21C432B100 and earlier versions,NEM-L51C432B120 and earlier versions,KNT-AL10C746B160 and ear… |
CVE-2017-2696 | High | 7.8 | 2017-11-22 | The emerg_data driver in CAM-L21C10B130 and earlier versions, CAM-L21C185B141 and earlier versions has a buffer overflow vulnerability. An attacker with the ro… |
CVE-2017-2695 | Medium | 5.5 | 2017-11-22 | TIT-AL00C583B211 has a directory traversal vulnerability which allows an attacker to obtain the files in email application. |
CVE-2017-2694 | Low | 3.3 | 2017-11-22 | The AlarmService component in HwVmall with software earlier than 1.5.2.0 versions has no control over calling permissions, allowing any third party to call. An… |
CVE-2017-2693 | High | 7.8 | 2017-11-22 | ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and earlier versions,ALE-L21C432B… |
CVE-2017-2692 | High | 7.8 | 2017-11-22 | The Keyguard application in ALE-L02C635B140 and earlier versions,ALE-L02C636B140 and earlier versions,ALE-L21C10B150 and earlier versions,ALE-L21C185B200 and e… |
CVE-2017-2691 | Medium | 6.8 | 2017-11-22 | Huawei P9 versions earlier before EVA-AL10C00B373, versions earlier before EVA-CL00C92B373, versions earlier before EVA-DL00C17B373, versions earlier before EV… |
CVE-2017-2690 | Medium | 5.5 | 2017-11-22 | SoftCo with software V200R003C20,eSpace U1910 with software V200R003C00, V200R003C20 and V200R003C30,eSpace U1911 with software V200R003C20, V200R003C30,eSpace… |
CVE-2017-12172 | Medium | 6.7 | 2017-11-22 | PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, 9.3.x before 9.3.20, and 9.2.x before 9.2.24 runs under a non-root o… |
CVE-2017-15528 | Low | 3.7 | 2017-11-22 | Prior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate spoofing vulnerability, which is a type of attack whereby a malic… |
CVE-2017-15099 | Medium | 6.5 | 2017-11-22 | INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker… |
CVE-2017-12193 | Medium | 5.5 | 2017-11-22 | The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users… |
CVE-2017-12190 | Medium | 6.5 | 2017-11-22 | The bio_map_user_iov and bio_unmap_user functions in block/bio.c in the Linux kernel before 4.13.8 do unbalanced refcounting when a SCSI I/O vector has small c… |
CVE-2017-7736 | Medium | 5.4 | 2017-11-22 | A stored Cross-site Scripting (XSS) vulnerability in Fortinet FortiWeb webUI Certificate View page in 5.8.0, 5.7.1 and earlier, allows attackers to inject arbi… |
CVE-2017-15098 | High | 8.1 | 2017-11-22 | Invalid json_populate_recordset or jsonb_populate_recordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x befor… |
CVE-2017-13071 | Critical | 9.8 | 2017-11-22 | QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3 (for QTS… |
CVE-2017-6166 | Medium | 5.9 | 2017-11-22 | In BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe software 12.0.0 to 12.1.1, in some cases the Traffic Management Microkerne… |
CVE-2017-8864 | Critical | 9.8 | 2017-11-22 | Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to the camera and cau… |
CVE-2017-8863 | High | 7.5 | 2017-11-22 | Information disclosure of .esp source code on the Cohu 3960 allows an attacker to view sensitive information such as application logic with a simple web browse… |
CVE-2017-8862 | Critical | 9.8 | 2017-11-22 | The webupgrade function on the Cohu 3960HD does not verify the firmware upgrade files or process, allowing an attacker to upload a specially crafted postinstal… |
CVE-2017-8861 | Critical | 9.8 | 2017-11-22 | Missing authentication for the remote configuration port 1236/tcp on the Cohu 3960HD allows an attacker to change configuration parameters such as IP address a… |
CVE-2017-8860 | Medium | 6.5 | 2017-11-22 | Information disclosure through directory listing on the Cohu 3960HD allows an attacker to view and download source code, log files, and other sensitive device… |
CVE-2017-16926 | Critical | 9.8 | 2017-11-22 | Ohcount 3.0.0 is prone to a command injection via specially crafted filenames containing shell metacharacters, which can be exploited by an attacker (providing… |
CVE-2017-7550 | Critical | 9.8 | 2017-11-21 | A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could… |
CVE-2017-5729 | High | 7.4 | 2017-11-21 | Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames via channel-based ma… |
CVE-2017-5719 | Critical | 9.8 | 2017-11-21 | A vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user. |
CVE-2017-5712 | High | 7.2 | 2017-11-21 | Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allows attacker with… |
CVE-2017-5711 | High | 7.8 | 2017-11-21 | Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 allow attac… |
CVE-2017-5710 | High | 7.8 | 2017-11-21 | Multiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0 allows unauthorized process to access privileged content via unspecifie… |
CVE-2017-5709 | High | 7.8 | 2017-11-21 | Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via unspecifie… |
CVE-2017-5708 | High | 7.8 | 2017-11-21 | Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process to access privileged… |
CVE-2017-5707 | High | 7.8 | 2017-11-21 | Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to the system to execute arbitrary code. |
CVE-2017-5706 | High | 7.8 | 2017-11-21 | Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute arbitrary code. |
CVE-2017-5705 | High | 7.8 | 2017-11-21 | Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access to the system to ex… |
CVE-2017-16923 | High | 8.8 | 2017-11-21 | Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_)_cn, Ac15 US_AC15V… |
CVE-2017-16664 | High | 8.8 | 2017-11-21 | Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5 before 5.0.24, 4 before 4.0.26, and 3.3 before 3.3.20. In the agent i… |
CVE-2017-16920 | Critical | 9.8 | 2017-11-21 | v5/config/system.php in dayrui FineCms 5.2.0 has a default SYS_KEY value and does not require key regeneration for each installation, which allows remote attac… |
CVE-2017-16613 | Critical | 9.8 | 2017-11-21 | An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy serv… |
CVE-2017-15044 | High | 8.8 | 2017-11-21 | The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from the embedded Solr… |
CVE-2017-16919 | Medium | 5.4 | 2017-11-21 | MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inject arbitrary web s… |
CVE-2017-16840 | Critical | 9.8 | 2017-11-21 | The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-bounds read) because of incorrect buffer… |
CVE-2017-2919 | High | 7.8 | 2017-11-20 | An exploitable stack based buffer overflow vulnerability exists in the xls_getfcell function of libxls 1.3.4. A specially crafted XLS file can cause a memory c… |
CVE-2017-2897 | High | 7.8 | 2017-11-20 | An exploitable out-of-bounds write vulnerability exists in the read_MSAT function of libxls 1.4. A specially crafted XLS file can cause a memory corruption res… |
CVE-2017-2896 | High | 7.8 | 2017-11-20 | An exploitable out-of-bounds write vulnerability exists in the xls_mergedCells function of libxls 1.4. . A specially crafted XLS file can cause a memory corrup… |
CVE-2017-12111 | High | 8.8 | 2017-11-20 | An exploitable out-of-bounds vulnerability exists in the xls_addCell function of libxls 1.4. A specially crafted XLS file with a formula record can cause memor… |
CVE-2017-12110 | High | 8.8 | 2017-11-20 | An exploitable integer overflow vulnerability exists in the xls_appendSST function of libxls 1.4.A specially crafted XLS file can cause memory corruption resul… |
CVE-2017-3157 | Medium | 5.5 | 2017-11-20 | By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a file from the user's… |
CVE-2017-16908 | Medium | 5.4 | 2017-11-20 | In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource. This can be leveraged for remote code execution after compromisin… |
CVE-2017-16907 | Medium | 5.4 | 2017-11-20 | In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action. |
CVE-2017-16906 | Medium | 5.4 | 2017-11-20 | In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -> New Event" action. |
CVE-2017-12608 | High | 7.8 | 2017-11-20 | A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to craft malicious docume… |
CVE-2017-16904 | Medium | 6.1 | 2017-11-20 | The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrato… |
CVE-2017-16903 | Critical | 9.8 | 2017-11-20 | LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences in the dir parameter, in conjunction wit… |
CVE-2017-15527 | Medium | 6.8 | 2017-11-20 | Prior to ITMS 8.1 RU4, the Symantec Management Console can be susceptible to a directory traversal exploit, which is a type of attack that can occur when there… |
CVE-2017-12607 | High | 7.8 | 2017-11-20 | A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documents that cause denia… |
CVE-2017-16902 | High | 7.5 | 2017-11-20 | On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes… |
CVE-2017-16899 | High | 7.1 | 2017-11-20 | An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclosure with a malicio… |
CVE-2017-9806 | High | 7.8 | 2017-11-20 | A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to craft malicious docume… |
CVE-2017-16898 | Medium | 5.5 | 2017-11-20 | The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attackers to cause a den… |
CVE-2017-16896 | Critical | 9.8 | 2017-11-20 | A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter. |
CVE-2017-16544 | High | 8.8 | 2017-11-20 | In the add_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of filenames in a direct… |
CVE-2017-11402 | Critical | 9.8 | 2017-11-20 | An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Design flaws in OPC classic and in custom netfilter modul… |
CVE-2017-11401 | Critical | 9.8 | 2017-11-20 | An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. Improper handling of the mbap.length field of ModBus pack… |
CVE-2017-11400 | Medium | 6.8 | 2017-11-20 | An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. An incomplete firmware signature allows a local attacker… |
CVE-2017-15110 | Medium | 4.3 | 2017-11-20 | In Moodle 3.x, students can find out email addresses of other students in the same course. Using search on the Participants page, students could search email a… |
CVE-2017-16894 | High | 7.5 | 2017-11-20 | In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct request for the /.env… |
CVE-2017-16892 | High | 7.5 | 2017-11-19 | In Bftpd before 4.7, there is a memory leak in the file rename function. |
CVE-2017-16883 | Medium | 6.5 | 2017-11-18 | The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow attackers to cause a… |
CVE-2017-16882 | High | 7.8 | 2017-11-18 | Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-root account (and simi… |
CVE-2017-16881 | Medium | 6.1 | 2017-11-18 | b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/avatar, related to… |
CVE-2017-14077 | Medium | 6.1 | 2017-11-18 | HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVER['HTTP_USER_AGENT']… |
CVE-2017-16566 | Critical | 9.8 | 2017-11-17 | On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or replace core system file… |
CVE-2017-1000221 | Medium | 6.5 | 2017-11-17 | In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will handle the access con… |
CVE-2017-1000217 | High | 8.8 | 2017-11-17 | Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code exe… |
CVE-2017-1000128 | Medium | 5.5 | 2017-11-17 | Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser |
CVE-2017-1000127 | Medium | 5.5 | 2017-11-17 | Exiv2 0.26 contains a heap buffer overflow in tiff parser |
CVE-2017-1000126 | Medium | 5.5 | 2017-11-17 | exiv2 0.26 contains a Stack out of bounds read in webp parser |
CVE-2017-4939 | High | 7.8 | 2017-11-17 | VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This i… |
CVE-2017-16880 | Medium | 6.1 | 2017-11-17 | The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS. |
CVE-2017-1000230 | High | 7.5 | 2017-11-17 | The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementation in Snap7 are prov… |
CVE-2017-1000227 | Medium | 5.4 | 2017-11-17 | Stored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almost anything an admin can |
CVE-2017-1000190 | Critical | 9.1 | 2017-11-17 | SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on. |
CVE-2017-1000163 | Medium | 6.1 | 2017-11-17 | The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redirection, which may r… |
CVE-2017-16845 | Critical | 10.0 | 2017-11-17 | hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access. |
CVE-2017-14111 | High | 7.2 | 2017-11-17 | The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and earlier records domain authentication c… |
CVE-2017-1000215 | Critical | 9.8 | 2017-11-17 | ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution |
CVE-2017-6168 | High | 7.4 | 2017-11-17 | On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) a virtual server co… |
CVE-2017-13703 | High | 7.5 | 2017-11-17 | An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur. |
CVE-2017-13702 | Medium | 5.3 | 2017-11-17 | An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused. |
CVE-2017-13700 | Medium | 4.8 | 2017-11-17 | An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface. |
CVE-2017-1000170 | High | 7.5 | 2017-11-17 | jqueryFileTree 2.1.5 and older Directory Traversal |
CVE-2017-1000169 | Critical | 9.8 | 2017-11-17 | QuickerBB version <= 0.7.2 is vulnerable to arbitrary file writes which can lead to remote code execution. This can lead to the complete takeover of the server… |
CVE-2017-1000168 | Medium | 6.5 | 2017-11-17 | sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys |
CVE-2017-16877 | High | 7.5 | 2017-11-17 | ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive information. |
CVE-2017-16819 | Medium | 5.4 | 2017-11-17 | A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to inject arbitrary Java… |
CVE-2017-1000192 | Critical | 9.8 | 2017-11-17 | Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion. The attacker can read the co… |