CVEs published May 9, 2017
40 CVEs were published on May 9, 2017: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 40
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 39
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Nvidia GPU Display Driver
- 15
- Adobe Flash Player 25.0.0.148 and earlier.
- 7
- F5 Networks BIG-IP
- 3
- F5 Networks BIG-IP APM
- 2
- Adobe Experience Manager Forms 6.2, 6.1,
- 1
- Apache Software Foundation Apache Cordova Android · cordova…
- 1
- F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- 1
- Microsoft Malware Protection Engine
- 1
- Schneider Electric SE VAMPSET
- 1
- TIBCO Software TIBCO Spotfire Server · TIBCO Software TIBCO…
- 1
Medium, low and unrated 40
- CVE-2017-0341All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for…Nvidia GPU Display Driver
- CVE-2017-0342All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where…Nvidia GPU Display Driver
- CVE-2017-0343All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) where user can…Nvidia GPU Display Driver
- CVE-2017-0344All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for…Nvidia GPU Display Driver
- CVE-2017-0345All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for…Nvidia GPU Display Driver
- CVE-2017-0346All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for…Nvidia GPU Display Driver
- CVE-2017-0347All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for…Nvidia GPU Display Driver
- CVE-2017-0348All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a NULL…Nvidia GPU Display Driver
- CVE-2017-0349All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for…Nvidia GPU Display Driver
- CVE-2017-0350All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to…Nvidia GPU Display Driver
- CVE-2017-0351All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference…Nvidia GPU Display Driver
- CVE-2017-0352All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU…Nvidia GPU Display Driver
- CVE-2017-0353All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where due to…Nvidia GPU Display Driver
- CVE-2017-0354All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where a…Nvidia GPU Display Driver
- CVE-2017-0355All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where it…Nvidia GPU Display Driver
- CVE-2017-8856In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution…
- CVE-2017-8857In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote…
- CVE-2017-8858In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using…
- CVE-2017-8859In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root.
- CVE-2017-5527TIBCO Spotfire injection vulnerabilitiesTIBCO Software TIBCO Spotfire Server · TIBCO Software TIBCO…
- CVE-2017-8854wolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka a buffer overflow triggered by a…
- CVE-2017-8855wolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key.
- CVE-2017-7967All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corruption vulnerability…Schneider Electric SE VAMPSET
- CVE-2017-3067Adobe Experience Manager Forms versions 6.2, 6.1, 6.0 have an information disclosure vulnerability resulting from abuse of the…Adobe Experience Manager Forms 6.2, 6.1,
- CVE-2017-3068Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine.Adobe Flash Player 25.0.0.148 and earlier.
Show all 40 entriesShow fewer entries
- CVE-2017-3069Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class.Adobe Flash Player 25.0.0.148 and earlier.
- CVE-2017-3070Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class.Adobe Flash Player 25.0.0.148 and earlier.
- CVE-2017-3071Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects.Adobe Flash Player 25.0.0.148 and earlier.
- CVE-2017-3072Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class.Adobe Flash Player 25.0.0.148 and earlier.
- CVE-2017-3073Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties…Adobe Flash Player 25.0.0.148 and earlier.
- CVE-2017-3074Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class.Adobe Flash Player 25.0.0.148 and earlier.
- CVE-2017-8853Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/app_config/controller/backuper.php via directory traversal in the…
- CVE-2016-6799Product: Apache Cordova Android 5.2.2 and earlier.Apache Software Foundation Apache Cordova Android · cordova…
- CVE-2016-9251In F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation of privileges through a crafted iControl…F5 Networks BIG-IP
- CVE-2016-9253In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured…F5 Networks BIG-IP
- CVE-2016-9256In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the…F5 Networks BIG-IP
- CVE-2016-9257In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered…F5 Networks BIG-IP APM
- CVE-2017-0302In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may…F5 Networks BIG-IP APM
- CVE-2017-6137In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1…F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2017-0290The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2…Microsoft Malware Protection Engine