2017 CVEs (page 95)
Page 95 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-1467 | High | 8.1 | 2017-08-02 | A network layer security vulnerability in InfoSphere Information Server 9.1, 11.3, and 11.5 can lead to privilege escalation or unauthorized access. IBM X-Forc… |
CVE-2017-1383 | Critical | 9.1 | 2017-08-02 | IBM InfoSphere Information Server 9.1, 11.3, and 11.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker… |
CVE-2017-1118 | High | 7.5 | 2017-08-02 | IBM WebSphere MQ Internet Pass-Thru 2.0 and 2.1 could allow n attacker to cause the MQIPT to stop responding due to an incorrectly configured security policy… |
CVE-2017-2288 | High | 7.8 | 2017-08-02 | Untrusted search path vulnerability in LhaForge Ver.1.6.5 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
CVE-2017-2287 | High | 7.8 | 2017-08-02 | Untrusted search path vulnerability in NFC Port Software remover Ver.1.3.0.1 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an uns… |
CVE-2017-2286 | High | 7.8 | 2017-08-02 | Untrusted search path vulnerability in NFC Port Software Version 5.5.0.6 and earlier (for RC-S310, RC-S320, RC-S330, RC-S370, RC-S380, RC-S380/S), NFC Port Sof… |
CVE-2017-2285 | Medium | 6.1 | 2017-08-02 | Cross-site scripting vulnerability in Simple Custom CSS and JS prior to version 3.4 allows remote attackers to inject arbitrary web script or HTML via unspecif… |
CVE-2017-2284 | Medium | 6.1 | 2017-08-02 | Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2017-2283 | High | 8.0 | 2017-08-02 | WN-G300R3 firmware version 1.0.2 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on the… |
CVE-2017-2282 | Medium | 6.8 | 2017-08-02 | Buffer overflow in WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary commands via unspecified vectors. |
CVE-2017-2281 | High | 8.8 | 2017-08-02 | WN-AX1167GR firmware version 3.00 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. |
CVE-2017-2280 | High | 8.8 | 2017-08-02 | WN-AX1167GR firmware version 3.00 and earlier uses hardcoded credentials which may allow an attacker that can access the device to execute arbitrary code on th… |
CVE-2017-2279 | High | 7.8 | 2017-08-02 | Untrusted search path vulnerability in Tween Ver1.6.6.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
CVE-2017-2278 | Medium | 5.9 | 2017-08-02 | The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL… |
CVE-2017-2138 | High | 8.8 | 2017-08-02 | Cross-site request forgery (CSRF) vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Edition v4… |
CVE-2017-11494 | Critical | 9.8 | 2017-08-02 | SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter… |
CVE-2017-11364 | High | 8.8 | 2017-08-02 | The CMS installer in Joomla! before 3.7.4 does not verify a user's ownership of a webspace, which allows remote authenticated users to gain control of the targ… |
CVE-2017-12200 | Medium | 6.1 | 2017-08-02 | The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has XSS in the Add Product Manually component. |
CVE-2017-12199 | Critical | 9.8 | 2017-08-02 | The Etoile Ultimate Product Catalog plugin 4.2.11 for WordPress has SQL injection with these wp-admin/admin-ajax.php POST actions: catalogue_update_order list-… |
CVE-2017-12145 | Medium | 6.5 | 2017-08-02 | In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_ftyp in ftyp.c, which allows attackers to cause a denial of service via a… |
CVE-2017-12144 | Medium | 5.5 | 2017-08-02 | In ytnef 1.9.2, an allocation failure was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of service via a crafted file. |
CVE-2017-12143 | Medium | 6.5 | 2017-08-02 | In libquicktime 1.2.4, an allocation failure was found in the function quicktime_read_info in lqt_quicktime.c, which allows attackers to cause a denial of serv… |
CVE-2017-12142 | Medium | 5.5 | 2017-08-02 | In ytnef 1.9.2, an invalid memory read vulnerability was found in the function SwapDWord in ytnef.c, which allows attackers to cause a denial of service via a… |
CVE-2017-12141 | Medium | 5.5 | 2017-08-02 | In ytnef 1.9.2, a heap-based buffer overflow vulnerability was found in the function TNEFFillMapi in ytnef.c, which allows attackers to cause a denial of servi… |
CVE-2017-12140 | Medium | 6.5 | 2017-08-02 | The ReadDCMImage function in coders\dcm.c in ImageMagick 7.0.6-1 has an integer signedness error leading to excessive memory consumption via a crafted DCM file. |
CVE-2017-12139 | Medium | 6.1 | 2017-08-02 | XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php. |
CVE-2017-12138 | Medium | 6.1 | 2017-08-02 | XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter. |
CVE-2017-8663 | High | 7.8 | 2017-08-01 | Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a remote code exec… |
CVE-2017-8572 | Medium | 5.5 | 2017-08-01 | Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows an information dis… |
CVE-2017-8571 | High | 7.8 | 2017-08-01 | Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a security feature… |
CVE-2017-1500 | Medium | 6.1 | 2017-08-01 | A Reflected Cross Site Scripting (XSS) vulnerability exists in the authorization function exposed by RESTful Web Api of IBM Worklight Framework 6.1, 6.2, 6.3… |
CVE-2017-4923 | Critical | 9.8 | 2017-08-01 | VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when us… |
CVE-2017-4922 | Medium | 6.5 | 2017-08-01 | VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the service startup script using world writable directories as temp… |
CVE-2017-4921 | High | 8.8 | 2017-08-01 | VMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that occurs due to the use of LD_LIBRARY_PATH variable in an unsafe mann… |
CVE-2017-12132 | Medium | 5.9 | 2017-08-01 | The DNS stub resolver in the GNU C Library (aka glibc or libc6) before version 2.26, when EDNS support is enabled, will solicit large UDP responses from name s… |
CVE-2017-12062 | Medium | 6.1 | 2017-08-01 | An XSS issue was discovered in manage_user_page.php in MantisBT 2.x before 2.5.2. The 'filter' field is not sanitized before being rendered in the Manage User… |
CVE-2017-12061 | Medium | 6.1 | 2017-08-01 | An XSS issue was discovered in admin/install.php in MantisBT before 1.3.12 and 2.x before 2.5.2. Some variables under user control in the MantisBT installation… |
CVE-2017-11381 | Critical | 9.8 | 2017-08-01 | A command injection vulnerability exists in Trend Micro Deep Discovery Director 1.1 that allows an attacker to restore accounts that can access the pre-configu… |
CVE-2017-11380 | Critical | 9.8 | 2017-08-01 | Backup archives were found to be encrypted with a static password across different installations, which suggest the same password may be used in all virtual ap… |
CVE-2017-11379 | High | 7.5 | 2017-08-01 | Configuration and database backup archives are not signed or validated in Trend Micro Deep Discovery Director 1.1. |
CVE-2017-11136 | Medium | 6.5 | 2017-08-01 | An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. It uses RSA to exchange… |
CVE-2017-11135 | High | 7.5 | 2017-08-01 | An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The logout mechanism doe… |
CVE-2017-11134 | Medium | 6.5 | 2017-08-01 | An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The login credentials are written into a log file on the device. Hence, an attack… |
CVE-2017-11133 | High | 7.5 | 2017-08-01 | An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. To encrypt messages, AES… |
CVE-2017-11132 | High | 7.5 | 2017-08-01 | An issue was discovered in heinekingmedia StashCat before 1.5.18 for Android. No certificate pinning is implemented; therefore the attacker could issue a certi… |
CVE-2017-11131 | Medium | 5.9 | 2017-08-01 | An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. For authentication, the… |
CVE-2017-11130 | High | 8.1 | 2017-08-01 | An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The product's protocol o… |
CVE-2017-11129 | Critical | 9.8 | 2017-08-01 | An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android. The keystore is locked with a hard-coded password. Therefore, everyone with acces… |
CVE-2017-11552 | Medium | 6.5 | 2017-08-01 | mpg321.c in mpg321 0.3.2-1 does not properly manage memory for use with libmad 0.15.1b, which allows remote attackers to cause a denial of service (memory corr… |
CVE-2017-12131 | Medium | 6.1 | 2017-08-01 | The Easy Testimonials plugin 3.0.4 for WordPress has XSS in include/settings/display.options.php, as demonstrated by the Default Testimonials Width, View More… |
CVE-2017-12068 | Medium | 6.1 | 2017-08-01 | The Event List plugin 0.7.9 for WordPress has XSS in the slug array parameter to wp-admin/admin.php in an el_admin_categories delete_bulk action. |
CVE-2017-12067 | High | 7.5 | 2017-08-01 | Potrace 1.14 has a heap-based buffer over-read in the interpolate_cubic function in mkbitmap.c. |
CVE-2017-12066 | Medium | 5.4 | 2017-08-01 | Cross-site scripting (XSS) vulnerability in aggregate_graphs.php in Cacti before 1.1.16 allows remote authenticated users to inject arbitrary web script or HTM… |
CVE-2017-12065 | Critical | 9.8 | 2017-08-01 | spikekill.php in Cacti before 1.1.16 might allow remote attackers to execute arbitrary code via the avgnan, outlier-start, or outlier-end parameter. |
CVE-2017-12064 | High | 7.5 | 2017-08-01 | The csv_log_html function in library/edihistory/edih_csv_inc.php in OpenEMR 5.0.0 and prior allows attackers to bypass intended access restrictions via a craft… |
CVE-2017-11727 | Medium | 6.1 | 2017-07-31 | services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution (involving a ContactCommon… |
CVE-2017-11726 | High | 8.8 | 2017-07-31 | services/system_io/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forgery (CSRF), as demonstrated by changing an… |
CVE-2017-11648 | High | 8.8 | 2017-07-31 | Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection against a CSRF vulnerability, as demonstrated by a goform/Bas… |
CVE-2017-1496 | Medium | 5.4 | 2017-07-31 | IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in… |
CVE-2017-1460 | High | 7.5 | 2017-07-31 | IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin. Routing tables are affected by a missing LSA, which may lead to loss of… |
CVE-2017-1386 | Medium | 5.9 | 2017-07-31 | IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man… |
CVE-2017-1370 | Medium | 4.9 | 2017-07-31 | IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from the Report Builder… |
CVE-2017-1332 | Medium | 6.1 | 2017-07-31 | IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering th… |
CVE-2017-1303 | Medium | 6.1 | 2017-07-31 | IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary J… |
CVE-2017-1227 | High | 7.5 | 2017-07-31 | IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system. IBM X-Force ID: 123906. |
CVE-2017-11760 | High | 8.8 | 2017-07-31 | uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed of concatenated ima… |
CVE-2017-11670 | High | 7.5 | 2017-07-31 | A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network traffic in the extract_eapusername funct… |
CVE-2017-11669 | High | 7.5 | 2017-07-31 | An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4 handled processing of network packets… |
CVE-2017-11668 | High | 7.5 | 2017-07-31 | An out-of-bounds read flaw related to the assess_packet function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing of network packets… |
CVE-2017-11757 | Critical | 9.8 | 2017-07-31 | Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to execute arbitrary code via crafted traffic to TCP port 1583… |
CVE-2017-11743 | Critical | 9.8 | 2017-07-31 | MEDHOST Connex contains a hard-coded Mirth Connect admin credential that is used for customer Mirth Connect management access. An attacker with knowledge of th… |
CVE-2017-11551 | Medium | 5.5 | 2017-07-31 | The id3_field_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 file. |
CVE-2017-11550 | Medium | 5.5 | 2017-07-31 | The id3_ucs4_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference and application cras… |
CVE-2017-11549 | Medium | 5.5 | 2017-07-31 | The play_midi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (large loop and CPU consumption) via a crafted m… |
CVE-2017-11548 | Medium | 5.5 | 2017-07-31 | The _tokenize_matrix function in audio_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruption) via a crafted MP3… |
CVE-2017-11547 | Medium | 5.5 | 2017-07-31 | The resample_gauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted… |
CVE-2017-11546 | Medium | 5.5 | 2017-07-31 | The insert_note_steps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (divide-by-zero error and application cr… |
CVE-2017-11359 | Medium | 5.5 | 2017-07-31 | The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application cra… |
CVE-2017-11358 | Medium | 5.5 | 2017-07-31 | The read_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read and application cr… |
CVE-2017-11333 | Medium | 5.5 | 2017-07-31 | The vorbis_analysis_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via a crafted wav file. |
CVE-2017-11332 | Medium | 5.5 | 2017-07-31 | The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash… |
CVE-2017-11331 | Medium | 5.5 | 2017-07-31 | The wav_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocation error) via a cra… |
CVE-2017-11330 | Medium | 5.5 | 2017-07-31 | The DivFixppCore::avi_header_fix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a denial of service (invalid memory write and… |
CVE-2017-11119 | Medium | 5.5 | 2017-07-31 | The chk_mem_access function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service (invalid memory… |
CVE-2017-11118 | Medium | 5.5 | 2017-07-31 | The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (infinite loop and CPU co… |
CVE-2017-11117 | Medium | 5.5 | 2017-07-31 | The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-rea… |
CVE-2017-11116 | High | 7.8 | 2017-07-31 | The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer over-rea… |
CVE-2017-11115 | Medium | 5.5 | 2017-07-31 | The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-based buffer o… |
CVE-2017-11114 | Medium | 5.5 | 2017-07-31 | The put_chars function in html_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a crafted HTML file. |
CVE-2017-9522 | High | 7.5 | 2017-07-31 | The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which makes it easier for rem… |
CVE-2017-9521 | Critical | 9.8 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r204217… |
CVE-2017-9498 | Medium | 5.5 | 2017-07-31 | The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) and Xfinity XR11-20 Voice Remote devices allows local users to upload arb… |
CVE-2017-9497 | Medium | 6.8 | 2017-07-31 | The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to execute arbitrary comman… |
CVE-2017-9496 | Medium | 6.8 | 2017-07-31 | The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to access an SNMP server by… |
CVE-2017-9495 | Medium | 4.6 | 2017-07-31 | The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows physically proximate attackers to read arbitrary files by… |
CVE-2017-9494 | Medium | 5.3 | 2017-07-31 | The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to enable a Remote Web Inspector that is… |
CVE-2017-9493 | Medium | 6.3 | 2017-07-31 | The Comcast firmware on Motorola MX011ANM (firmware version MX011AN_2.9p6s1_PROD_sey) devices allows remote attackers to conduct successful forced-pairing atta… |
CVE-2017-9492 | High | 7.5 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r204217… |
CVE-2017-9491 | Medium | 5.3 | 2017-07-31 | The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r204217… |
CVE-2017-9490 | High | 8.8 | 2017-07-31 | The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows configuration changes… |