2017 CVEs (page 68)
Page 68 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-12285 | Medium | 5.3 | 2017-10-19 | A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from a… |
CVE-2017-12284 | Medium | 5.5 | 2017-10-19 | A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profile information, whic… |
CVE-2017-12272 | Medium | 6.1 | 2017-10-19 | A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) atta… |
CVE-2017-12271 | High | 8.8 | 2017-10-19 | A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device… |
CVE-2017-12260 | High | 7.5 | 2017-10-19 | A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones co… |
CVE-2017-12259 | High | 7.5 | 2017-10-19 | A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA51x Series IP Phones could allow an unauthe… |
CVE-2017-12251 | Critical | 9.9 | 2017-10-19 | A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interact maliciously with t… |
CVE-2017-15602 | High | 7.5 | 2017-10-18 | In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c, lea… |
CVE-2017-15601 | High | 7.5 | 2017-10-18 | In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTOR_png_extract_method function in plugins/png_extractor.c, related to processiTXt… |
CVE-2017-15600 | High | 7.5 | 2017-10-18 | In GNU Libextractor 1.4, there is a NULL Pointer Dereference in the EXTRACTOR_nsf_extract_method function of plugins/nsf_extractor.c. |
CVE-2017-15359 | Medium | 6.5 | 2017-10-18 | In the 3CX Phone System 15.5.3554.1, the Management Console typically listens to port 5001 and is prone to a directory traversal attack: "/api/RecordingList/Do… |
CVE-2017-14956 | Medium | 5.7 | 2017-10-18 | AlienVault USM v5.4.2 and earlier offers authenticated users the functionality of exporting generated reports via the "/ossim/report/wizard_email.php" script… |
CVE-2017-14322 | Critical | 9.8 | 2017-10-18 | The function in charge to check whether the user is already logged in init.php in Interspire Email Marketer (IEM) prior to 6.1.6 allows remote attackers to byp… |
CVE-2017-8022 | High | 8.1 | 2017-10-18 | An issue was discovered in EMC NetWorker (prior to 8.2.4.9, all supported 9.0.x versions, prior to 9.1.1.3, prior to 9.2.0.4). The Server service (nsrd) is aff… |
CVE-2017-13083 | Medium | 5.3 | 2017-10-18 | Akeo Consulting Rufus prior to version 2.17.1187 does not adequately validate the integrity of updates downloaded over HTTP, allowing an attacker to easily con… |
CVE-2017-8024 | Medium | 6.1 | 2017-10-18 | EMC Isilon OneFS (versions prior to 8.1.0.1, versions prior to 8.0.1.2, versions prior to 8.0.0.6, version 7.2.1.x) is impacted by a reflected cross-site scrip… |
CVE-2017-15596 | Medium | 6.0 | 2017-10-18 | An issue was discovered in Xen 4.4.x through 4.9.x allowing ARM guest OS users to cause a denial of service (prevent physical CPU usage) because of lock mishan… |
CVE-2017-15595 | High | 8.8 | 2017-10-18 | An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recursion, stack consumption, and hyperviso… |
CVE-2017-15594 | High | 8.8 | 2017-10-18 | An issue was discovered in Xen through 4.9.x allowing x86 SVM PV guest OS users to cause a denial of service (hypervisor crash) or gain privileges because IDT… |
CVE-2017-15593 | Medium | 6.5 | 2017-10-18 | An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (memory leak) because reference counts are mishandled. |
CVE-2017-15592 | High | 8.8 | 2017-10-18 | An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges becaus… |
CVE-2017-15591 | Medium | 6.5 | 2017-10-18 | An issue was discovered in Xen 4.5.x through 4.9.x allowing attackers (who control a stub domain kernel or tool stack) to cause a denial of service (host OS cr… |
CVE-2017-15590 | High | 8.8 | 2017-10-18 | An issue was discovered in Xen through 4.9.x allowing x86 guest OS users to cause a denial of service (hypervisor crash) or possibly gain privileges because MS… |
CVE-2017-15589 | Medium | 6.5 | 2017-10-18 | An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to obtain sensitive information from the host OS (or an arbitrary guest OS) becaus… |
CVE-2017-15588 | High | 7.8 | 2017-10-18 | An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to execute arbitrary code on the host OS because of a race condition that can cause… |
CVE-2017-15587 | High | 7.8 | 2017-10-18 | An integer overflow was discovered in pdf_read_new_xref_section in pdf/pdf-xref.c in Artifex MuPDF 1.11. |
CVE-2017-15583 | Medium | 6.5 | 2017-10-18 | The embedded web server on ABB Fox515T 1.0 devices is vulnerable to Local File Inclusion. It accepts a parameter that specifies a file for display or for use a… |
CVE-2017-15579 | Critical | 9.8 | 2017-10-18 | In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via an aa_pages_per_page cookie in a playlist action to watch.php. |
CVE-2017-15578 | High | 8.8 | 2017-10-18 | In PHPSUGAR PHP Melody before 2.7.3, SQL Injection exists via the image parameter to admin/edit_category.php. |
CVE-2017-15577 | High | 7.5 | 2017-10-18 | Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles the rendering of wiki links, which allows remote attackers to obtain sensitive information. |
CVE-2017-15576 | High | 7.5 | 2017-10-18 | Redmine before 3.2.6 and 3.3.x before 3.3.3 mishandles Time Entry rendering in activity views, which allows remote attackers to obtain sensitive information. |
CVE-2017-15575 | High | 7.3 | 2017-10-18 | In Redmine before 3.2.6 and 3.3.x before 3.3.3, Redmine.pm lacks a check for whether the Repository module is enabled in a project's settings, which might allo… |
CVE-2017-15574 | Medium | 6.1 | 2017-10-18 | In Redmine before 3.2.6 and 3.3.x before 3.3.3, stored XSS is possible by using an SVG document as an attachment. |
CVE-2017-15573 | Medium | 6.1 | 2017-10-18 | In Redmine before 3.2.6 and 3.3.x before 3.3.3, XSS exists because markup is mishandled in wiki content. |
CVE-2017-15572 | High | 7.5 | 2017-10-18 | In Redmine before 3.2.6 and 3.3.x before 3.3.3, remote attackers can obtain sensitive information (password reset tokens) by reading a Referer log, because acc… |
CVE-2017-15571 | Medium | 6.1 | 2017-10-18 | In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/issues/_list.html.erb via crafted column data. |
CVE-2017-15570 | Medium | 6.1 | 2017-10-18 | In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/views/timelog/_list.html.erb via crafted column data. |
CVE-2017-15569 | Medium | 6.1 | 2017-10-18 | In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/queries_helper.rb via a multi-value field with a crafted value t… |
CVE-2017-15568 | Medium | 6.1 | 2017-10-18 | In Redmine before 3.2.8, 3.3.x before 3.3.5, and 3.4.x before 3.4.3, XSS exists in app/helpers/application_helper.rb via a multi-value field with a crafted val… |
CVE-2017-9625 | High | 8.2 | 2017-10-17 | An Improper Authentication issue was discovered in Envitech EnviDAS Ultimate Versions prior to v1.0.0.5. The web application lacks proper authentication which… |
CVE-2017-15565 | High | 8.8 | 2017-10-17 | In Poppler 0.59.0, a NULL Pointer Dereference exists in the GfxImageColorMap::getGrayLine() function in GfxState.cc via a crafted PDF document. |
CVE-2017-14013 | Medium | 5.6 | 2017-10-17 | A Client-Side Enforcement of Server-Side Security issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The log out function in the applic… |
CVE-2017-14011 | High | 8.8 | 2017-10-17 | A Cross-Site Request Forgery issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The application does not sufficiently verify requests… |
CVE-2017-14009 | Medium | 6.5 | 2017-10-17 | An Information Exposure issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When an authenticated user uses the Change Password feature… |
CVE-2017-14007 | Medium | 5.6 | 2017-10-17 | An Insufficient Session Expiration issue was discovered in ProMinent MultiFLEX M10a Controller web interface. The user's session is available for an extended p… |
CVE-2017-14005 | High | 8.8 | 2017-10-17 | An Unverified Password Change issue was discovered in ProMinent MultiFLEX M10a Controller web interface. When setting a new password for a user, the applicatio… |
CVE-2017-13999 | Critical | 9.8 | 2017-10-17 | A Stack-based Buffer Overflow issue was discovered in WECON LEVI Studio HMI Editor v1.8.1 and prior. Multiple stack-based buffer overflow vulnerabilities have… |
CVE-2017-15539 | Critical | 9.8 | 2017-10-17 | SQL Injection exists in zorovavi/blog through 2017-10-17 via the id parameter to recept.php. |
CVE-2017-6273 | High | 7.8 | 2017-10-17 | NVIDIA ADSP Firmware contains a vulnerability in the ADSP Loader component where there is the potential to write to a memory location that is outside the inten… |
CVE-2017-5531 | High | 8.0 | 2017-10-17 | Deployments of TIBCO Managed File Transfer Command Center versions 8.0.0 and 8.0.1 and TIBCO Managed File Transfer Internet Server versions 8.0.0 and 8.0.1 tha… |
CVE-2017-3761 | Critical | 9.8 | 2017-10-17 | The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input. In certain cases, this could lead… |
CVE-2017-3760 | High | 8.1 | 2017-10-17 | The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded applications and/or d… |
CVE-2017-3759 | High | 8.1 | 2017-10-17 | The Lenovo Service Framework Android application accepts some responses from the server without proper validation. This exposes the application to man-in-the-m… |
CVE-2017-3758 | Critical | 9.8 | 2017-10-17 | Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code execution. |
CVE-2017-15538 | Medium | 5.4 | 2017-10-17 | Stored XSS vulnerability in the Media Objects component of ILIAS before 5.1.21 and 5.2.x before 5.2.9 allows an authenticated user to inject JavaScript to gain… |
CVE-2017-8805 | Critical | 9.1 | 2017-10-17 | Debian ftpsync before 20171017 does not use the rsync --safe-links option, which allows remote attackers to conduct directory traversal attacks via a crafted u… |
CVE-2017-15537 | Medium | 5.5 | 2017-10-17 | The x86/fpu (Floating Point Unit) subsystem in the Linux kernel before 4.13.5, when a processor supports the xsave feature but not the xsaves feature, does not… |
CVE-2017-13088 | Medium | 5.3 | 2017-10-17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Integrity Group Temporal Key (IGTK) when processing a Wireless Network… |
CVE-2017-13087 | Medium | 5.3 | 2017-10-17 | Wi-Fi Protected Access (WPA and WPA2) that support 802.11v allows reinstallation of the Group Temporal Key (GTK) when processing a Wireless Network Management… |
CVE-2017-13086 | Medium | 6.8 | 2017-10-17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Tunneled Direct-Link Setup (TDLS) Peer Key (TPK) during the TDLS handshake, allowing an atta… |
CVE-2017-13084 | Medium | 6.8 | 2017-10-17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an… |
CVE-2017-13082 | High | 8.1 | 2017-10-17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11r allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the fast BS… |
CVE-2017-13081 | Medium | 5.3 | 2017-10-17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the group key handshak… |
CVE-2017-13080 | Medium | 5.3 | 2017-10-17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio r… |
CVE-2017-13079 | Medium | 5.3 | 2017-10-17 | Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake… |
CVE-2017-13078 | Medium | 5.3 | 2017-10-17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Group Temporal Key (GTK) during the four-way handshake, allowing an attacker within radio ra… |
CVE-2017-13077 | Medium | 6.8 | 2017-10-17 | Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Pairwise Transient Key (PTK) Temporal Key (TK) during the four-way handshake, allowing an at… |
CVE-2017-15385 | High | 7.8 | 2017-10-16 | The store_versioninfo_gnu_verdef function in libr/bin/format/elf/elf.c in radare2 2.0.0 allows remote attackers to cause a denial of service (r_read_le16 inval… |
CVE-2017-9368 | High | 7.5 | 2017-10-16 | An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applicati… |
CVE-2017-9367 | Critical | 9.8 | 2017-10-16 | A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the… |
CVE-2017-0316 | High | 7.8 | 2017-10-16 | In GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a vulnerability in NVISystemService64 where a value passed from a user to… |
CVE-2017-15289 | Medium | 6.0 | 2017-10-16 | The mode4and5 write functions in hw/display/cirrus_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of-bounds write access… |
CVE-2017-15265 | High | 7.0 | 2017-10-16 | Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspec… |
CVE-2017-15221 | High | 7.8 | 2017-10-16 | ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324. |
CVE-2017-15384 | Medium | 6.1 | 2017-10-16 | rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action. |
CVE-2017-15383 | High | 7.8 | 2017-10-16 | Nero 7.10.1.0 has an unquoted BINARY_PATH_NAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILES(x86)%\Nero directory. |
CVE-2017-15361 | Medium | 5.9 | 2017-10-16 | The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b… |
CVE-2017-15297 | High | 7.5 | 2017-10-16 | SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. This is SAP Security Note 2442993. |
CVE-2017-15296 | High | 8.8 | 2017-10-16 | The Java component in SAP CRM has CSRF. This is SAP Security Note 2478964. |
CVE-2017-15295 | Critical | 9.8 | 2017-10-16 | Xpress Server in SAP POS does not require authentication for read/write/delete file access. This is SAP Security Note 2520064. |
CVE-2017-15294 | Medium | 6.1 | 2017-10-16 | The Java administration console in SAP CRM has XSS. This is SAP Security Note 2478964. |
CVE-2017-15293 | Critical | 9.8 | 2017-10-16 | Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on c… |
CVE-2017-14952 | Critical | 9.8 | 2017-10-16 | Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a c… |
CVE-2017-15376 | Critical | 9.8 | 2017-10-16 | The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote attackers to execute arbitrary commands via TCP port 23. |
CVE-2017-15375 | Medium | 6.1 | 2017-10-16 | Multiple client-side cross site scripting vulnerabilities have been discovered in the WpJobBoard v4.5.1 web-application for WordPress. The vulnerabilities are… |
CVE-2017-15374 | Medium | 6.1 | 2017-10-16 | Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attacke… |
CVE-2017-15373 | Critical | 9.8 | 2017-10-16 | E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php (aka the search private area). |
CVE-2017-15372 | Medium | 5.5 | 2017-10-16 | There is a stack-based buffer overflow in the lsx_ms_adpcm_block_expand_i function of adpcm.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a de… |
CVE-2017-15371 | Medium | 5.5 | 2017-10-16 | There is a reachable assertion abort in the function sox_append_comment() in formats.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of… |
CVE-2017-15370 | Medium | 5.5 | 2017-10-16 | There is a heap-based buffer overflow in the ImaExpandS function of ima_rw.c in Sound eXchange (SoX) 14.4.2. A Crafted input will lead to a denial of service a… |
CVE-2017-15369 | High | 7.8 | 2017-10-16 | The build_filter_chain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside in a register, whi… |
CVE-2017-15368 | High | 7.8 | 2017-10-16 | The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and appl… |
CVE-2017-15362 | Medium | 6.1 | 2017-10-16 | osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, aka XSS. Session ID… |
CVE-2017-15303 | High | 7.8 | 2017-10-16 | In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because any program running on the local machi… |
CVE-2017-15302 | High | 7.8 | 2017-10-16 | In CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver (e.g., cpuz143_x64.sys for version 1.43) that can result in information d… |
CVE-2017-15364 | Medium | 5.5 | 2017-10-15 | The foreach function in ext/ccsv.c in Ccsv 1.1.0 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unsp… |
CVE-2017-15363 | High | 7.5 | 2017-10-15 | Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 f… |
CVE-2017-15360 | Medium | 5.4 | 2017-10-15 | PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an H… |
CVE-2017-15300 | Medium | 5.3 | 2017-10-15 | The miner statistics HTTP API in EWBF Cuda Zcash Miner Version 0.3.4b hangs on incoming TCP connections until some sort of request is made (such as "GET / HTTP… |
CVE-2017-15305 | Medium | 6.1 | 2017-10-15 | XSS exists in NexusPHP 1.5 via the keyword parameter to messages.php. |