2017 CVEs (page 74)
Page 74 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-13989 | High | 8.1 | 2017-09-30 | An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthoriz… |
CVE-2017-13988 | Medium | 6.5 | 2017-09-30 | An improper access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows unauthoriz… |
CVE-2017-13987 | Medium | 6.5 | 2017-09-30 | An insufficient access control vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows an una… |
CVE-2017-13986 | Medium | 6.1 | 2017-09-30 | A reflected Cross-Site Scripting(XSS) vulnerability in ArcSight ESM and ArcSight ESM Express, any 6.x version prior to 6.9.1c Patch 4 or 6.11.0 Patch 1, allows… |
CVE-2017-13985 | Medium | 6.5 | 2017-09-30 | An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users… |
CVE-2017-13984 | Medium | 6.5 | 2017-09-30 | An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users… |
CVE-2017-13983 | Critical | 9.8 | 2017-09-30 | An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users… |
CVE-2017-13982 | High | 8.8 | 2017-09-30 | A directory traversal vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows users to… |
CVE-2017-13684 | High | 7.8 | 2017-09-30 | Unisys Libra 64xx and 84xx and FS601 class systems with MCP-FIRMWARE before 43.211 allow remote authenticated users to cause a denial of service (program crash… |
CVE-2017-9790 | High | 7.5 | 2017-09-29 | When handling a libprocess message wrapped in an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1, and 1.4.0-dev c… |
CVE-2017-8448 | High | 8.8 | 2017-09-29 | An error was found in the permission model used by X-Pack Alerting 5.0.0 to 5.6.0 whereby users mapped to certain built-in roles could create a watch that resu… |
CVE-2017-8447 | Medium | 6.5 | 2017-09-29 | An error was found in the X-Pack Security 5.3.0 to 5.5.2 privilege enforcement. If a user has either 'delete' or 'index' permissions on an index in a cluster… |
CVE-2017-8444 | Medium | 5.9 | 2017-09-29 | The client-forwarder in Elastic Cloud Enterprise versions prior to 1.0.2 do not properly encrypt traffic to ZooKeeper. If an attacker is able to man in the mid… |
CVE-2017-7687 | High | 7.5 | 2017-09-29 | When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos before 1.1.3, 1.2.x before 1.2.2, 1.3.x before 1.3.1… |
CVE-2017-7554 | Medium | 6.1 | 2017-09-29 | It was found that the App Studio component of RHMAP 4.4 executes javascript provided by a user. An attacker could use this flaw to execute a stored XSS attack… |
CVE-2017-7553 | Medium | 6.3 | 2017-09-29 | The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network interna… |
CVE-2017-7552 | Critical | 9.8 | 2017-09-29 | A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as crea… |
CVE-2017-14867 | High | 8.8 | 2017-09-29 | Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands s… |
CVE-2017-14866 | Medium | 5.5 | 2017-09-29 | There is a heap-based buffer overflow in the Exiv2::s2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack. |
CVE-2017-14865 | Medium | 5.5 | 2017-09-29 | There is a heap-based buffer overflow in the Exiv2::us2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack. |
CVE-2017-14864 | Medium | 5.5 | 2017-09-29 | An Invalid memory address dereference was discovered in Exiv2::getULong in types.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and applicati… |
CVE-2017-14863 | Medium | 5.5 | 2017-09-29 | A NULL pointer dereference was discovered in Exiv2::Image::printIFDStructure in image.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and appl… |
CVE-2017-14862 | Medium | 5.5 | 2017-09-29 | An Invalid memory address dereference was discovered in Exiv2::DataValue::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault and ap… |
CVE-2017-14861 | Medium | 5.5 | 2017-09-29 | There is a stack consumption vulnerability in the Exiv2::Internal::stringFormat function of image.cpp in Exiv2 0.26. A Crafted input will lead to a remote deni… |
CVE-2017-14860 | Medium | 5.5 | 2017-09-29 | There is a heap-based buffer over-read in the Exiv2::Jp2Image::readMetadata function of jp2image.cpp in Exiv2 0.26. A Crafted input will lead to a denial of se… |
CVE-2017-14859 | Medium | 5.5 | 2017-09-29 | An Invalid memory address dereference was discovered in Exiv2::StringValueBase::read in value.cpp in Exiv2 0.26. The vulnerability causes a segmentation fault… |
CVE-2017-14858 | Medium | 5.5 | 2017-09-29 | There is a heap-based buffer overflow in the Exiv2::l2Data function of types.cpp in Exiv2 0.26. A Crafted input will lead to a denial of service attack. |
CVE-2017-14857 | Medium | 5.5 | 2017-09-29 | In Exiv2 0.26, there is an invalid free in the Image class in image.cpp that leads to a Segmentation fault. A crafted input will lead to a denial of service at… |
CVE-2017-14507 | Critical | 9.8 | 2017-09-29 | Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1)… |
CVE-2017-12240 | Critical | 9.8 | 2017-09-29 | The DHCP relay subsystem of Cisco IOS 12.2 through 15.6 and Cisco IOS XE Software contains a vulnerability that could allow an unauthenticated, remote attacker… |
CVE-2017-12239 | Medium | 6.8 | 2017-09-29 | A vulnerability in motherboard console ports of line cards for Cisco ASR 1000 Series Aggregation Services Routers and Cisco cBR-8 Converged Broadband Routers c… |
CVE-2017-12238 | Medium | 6.5 | 2017-09-29 | A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Catalyst 6800 Series Switches could allow an unauthenti… |
CVE-2017-12237 | High | 7.5 | 2017-09-29 | A vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS 15.0 through 15.6 and Cisco IOS XE 3.5 through 16.5 could allow an unauthent… |
CVE-2017-12236 | Critical | 9.8 | 2017-09-29 | A vulnerability in the implementation of the Locator/ID Separation Protocol (LISP) in Cisco IOS XE 3.2 through 16.5 could allow an unauthenticated, remote atta… |
CVE-2017-12235 | High | 7.5 | 2017-09-29 | A vulnerability in the implementation of the PROFINET Discovery and Configuration Protocol (PN-DCP) for Cisco IOS 12.2 through 15.6 could allow an unauthentica… |
CVE-2017-12234 | High | 7.5 | 2017-09-29 | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, r… |
CVE-2017-12233 | High | 7.5 | 2017-09-29 | Multiple vulnerabilities in the implementation of the Common Industrial Protocol (CIP) feature in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, r… |
CVE-2017-12232 | Medium | 6.5 | 2017-09-29 | A vulnerability in the implementation of a protocol in Cisco Integrated Services Routers Generation 2 (ISR G2) Routers running Cisco IOS 15.0 through 15.6 coul… |
CVE-2017-12231 | High | 7.5 | 2017-09-29 | A vulnerability in the implementation of Network Address Translation (NAT) functionality in Cisco IOS 12.4 through 15.6 could allow an unauthenticated, remote… |
CVE-2017-12230 | High | 8.8 | 2017-09-29 | A vulnerability in the web-based user interface (web UI) of Cisco IOS XE 16.2 could allow an authenticated, remote attacker to elevate their privileges on an a… |
CVE-2017-12229 | Critical | 9.8 | 2017-09-29 | A vulnerability in the REST API of the web-based user interface (web UI) of Cisco IOS XE 3.1 through 16.5 could allow an unauthenticated, remote attacker to by… |
CVE-2017-12228 | Medium | 5.9 | 2017-09-29 | A vulnerability in the Cisco Network Plug and Play application of Cisco IOS 12.4 through 15.6 and Cisco IOS XE 3.3 through 16.4 could allow an unauthenticated… |
CVE-2017-12226 | High | 8.8 | 2017-09-29 | A vulnerability in the web-based Wireless Controller GUI of Cisco IOS XE Software for Cisco 5760 Wireless LAN Controllers, Cisco Catalyst 4500E Supervisor Engi… |
CVE-2017-12222 | Medium | 6.5 | 2017-09-29 | A vulnerability in the wireless controller manager of Cisco IOS XE could allow an unauthenticated, adjacent attacker to cause a restart of the switch and resul… |
CVE-2017-11479 | Medium | 6.1 | 2017-09-29 | Kibana versions prior to 5.6.1 had a cross-site scripting (XSS) vulnerability in Timelion that could allow an attacker to obtain sensitive information from or… |
CVE-2017-10701 | Medium | 6.1 | 2017-09-29 | Cross site scripting (XSS) vulnerability in SAP Enterprise Portal 7.50 allows remote attackers to inject arbitrary web script or HTML, aka SAP Security Notes 2… |
CVE-2017-2551 | High | 7.5 | 2017-09-28 | Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download. |
CVE-2017-1591 | Medium | 6.1 | 2017-09-28 | IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code… |
CVE-2017-1577 | High | 7.5 | 2017-09-28 | IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL… |
CVE-2017-14849 | High | 7.5 | 2017-09-28 | Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation… |
CVE-2017-14847 | High | 8.8 | 2017-09-28 | Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter. |
CVE-2017-14846 | High | 8.8 | 2017-09-28 | Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter. |
CVE-2017-14845 | High | 8.8 | 2017-09-28 | Mojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter. |
CVE-2017-14844 | High | 8.8 | 2017-09-28 | Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter. |
CVE-2017-14843 | High | 8.8 | 2017-09-28 | Mojoomla School Management System for WordPress allows SQL Injection via the id parameter. |
CVE-2017-14842 | High | 8.8 | 2017-09-28 | Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter. |
CVE-2017-14841 | Medium | 6.5 | 2017-09-28 | Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in profilesetting image handling. |
CVE-2017-14840 | High | 8.8 | 2017-09-28 | TeamWork TicketPlus allows Arbitrary File Upload in updateProfile. |
CVE-2017-14839 | High | 8.8 | 2017-09-28 | TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover. |
CVE-2017-14838 | High | 8.8 | 2017-09-28 | TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange. |
CVE-2017-1483 | High | 8.6 | 2017-09-28 | IBM Security Identity Manager Adapters 6.0 and 7.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users a… |
CVE-2017-14796 | High | 8.8 | 2017-09-28 | The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (integer underflow and application crash) or pos… |
CVE-2017-14795 | High | 8.8 | 2017-09-28 | The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or po… |
CVE-2017-14775 | Medium | 5.9 | 2017-09-28 | Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison. |
CVE-2017-14622 | Medium | 6.1 | 2017-09-28 | Multiple cross-site scripting (XSS) vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attackers to inject arbit… |
CVE-2017-14527 | High | 8.8 | 2017-09-28 | Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Webtop 6.8.0160.0073 allow remote authenticated users to list the contents of arb… |
CVE-2017-14526 | High | 8.8 | 2017-09-28 | Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users to list the contents… |
CVE-2017-14525 | Medium | 6.1 | 2017-09-28 | Multiple open redirect vulnerabilities in OpenText Documentum Webtop 6.8.0160.0073 allow remote attackers to redirect users to arbitrary web sites and conduct… |
CVE-2017-14524 | Medium | 6.1 | 2017-09-28 | Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and c… |
CVE-2017-1407 | High | 8.8 | 2017-09-28 | IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending… |
CVE-2017-13676 | High | 7.0 | 2017-09-28 | Norton Remove & Reinstall can be susceptible to a DLL preloading vulnerability. These types of issues occur when an application looks to call a DLL for executi… |
CVE-2017-12814 | Critical | 9.8 | 2017-09-28 | Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windows allows attackers… |
CVE-2017-12621 | Critical | 9.8 | 2017-09-28 | During Jelly (xml) file parsing with Apache Xerces, if a custom doctype entity is declared with a "SYSTEM" entity with a URL and that entity is used in the bod… |
CVE-2017-11191 | High | 8.8 | 2017-09-28 | FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-locking restrictions via an unlock action with an old session… |
CVE-2017-11121 | Critical | 9.8 | 2017-09-28 | On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious over-the-air Fast Transition frames can potentially trigger int… |
CVE-2017-11120 | Critical | 9.8 | 2017-09-28 | On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer… |
CVE-2017-10932 | Critical | 9.8 | 2017-09-28 | All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 are the application… |
CVE-2017-14767 | High | 8.8 | 2017-09-27 | The sdp_parse_fmtp_config_h264 function in libavformat/rtpdec_h264.c in FFmpeg before 3.3.4 mishandles empty sprop-parameter-sets values, which allows remote a… |
CVE-2017-14766 | High | 7.5 | 2017-09-27 | The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fn_ssr_add_st_submit() function and fn_ssr_d… |
CVE-2017-14765 | Medium | 6.1 | 2017-09-27 | In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request. |
CVE-2017-14764 | High | 8.8 | 2017-09-27 | In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module. |
CVE-2017-14763 | High | 8.8 | 2017-09-27 | In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme. |
CVE-2017-14762 | Medium | 6.1 | 2017-09-27 | In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter. |
CVE-2017-14761 | Medium | 6.1 | 2017-09-27 | In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter. |
CVE-2017-14760 | Critical | 9.8 | 2017-09-27 | SQL Injection exists in /includes/event-management/index.php in the event-espresso-free (aka Event Espresso Lite) plugin v3.1.37.12.L for WordPress via the rec… |
CVE-2017-14753 | Medium | 5.4 | 2017-09-27 | Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject arbitrary web script… |
CVE-2017-14751 | Medium | 6.1 | 2017-09-26 | The Intense WP "WP Jobs" plugin 1.5 for WordPress has XSS, related to the Job Qualification field. |
CVE-2017-14749 | High | 7.8 | 2017-09-26 | JerryScript 1.0 allows remote attackers to cause a denial of service (jmem_heap_alloc_block_internal heap memory corruption) or possibly execute arbitrary code… |
CVE-2017-1539 | High | 8.8 | 2017-09-26 | IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to privilege escalation by not properly distinguishing internal group memberships from user regist… |
CVE-2017-1531 | Medium | 5.4 | 2017-09-26 | IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2017-1530 | Medium | 5.4 | 2017-09-26 | IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2017-1527 | High | 8.1 | 2017-09-26 | IBM Business Process Manager 7.5, 8.0, and 8.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could… |
CVE-2017-14748 | Medium | 5.3 | 2017-09-26 | Race condition in Blizzard Overwatch 1.15.0.2 allows remote authenticated users to cause a denial of service (season bans and SR losses for other users) by lea… |
CVE-2017-1425 | Medium | 5.4 | 2017-09-26 | IBM Business Process Manager 8.0.1.1 and 8.5.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the… |
CVE-2017-14745 | High | 7.8 | 2017-09-26 | The *_get_synthetic_symtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, interpret a -1 value as a s… |
CVE-2017-5200 | High | 8.8 | 2017-09-26 | Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via S… |
CVE-2017-5192 | High | 8.8 | 2017-09-26 | When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authenti… |
CVE-2017-14704 | High | 8.8 | 2017-09-26 | Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote authen… |
CVE-2017-14602 | High | 7.2 | 2017-09-26 | A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.1 before bui… |
CVE-2017-13129 | High | 8.0 | 2017-09-26 | Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows remote authenticated users to hijack the authentication of administrato… |