# CVEs published 2017-05-16

38 CVEs were published on May 16, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-7488](https://cve.now/CVE-2017-7488.md): Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the… (no CVSS, authconfig)
- [CVE-2017-3825](https://cve.now/CVE-2017-3825.md): A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an… (no CVSS, Cisco TelePresence)
- [CVE-2017-3873](https://cve.now/CVE-2017-3873.md): A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight… (no CVSS, Cisco Aironet 1800, 2800, and 3800 Series Access Points)
- [CVE-2017-3876](https://cve.now/CVE-2017-3876.md): A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, remote attacker to… (no CVSS, Cisco IOS XR)
- [CVE-2017-3882](https://cve.now/CVE-2017-3882.md): A vulnerability in the Universal Plug-and-Play (UPnP) implementation in the Cisco CVR100W Wireless-N VPN Router could allow an… (no CVSS, Cisco CVR100W Wireless-N VPN Router)
- [CVE-2017-6079](https://cve.now/CVE-2017-6079.md): The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such… (no CVSS)
- [CVE-2017-6651](https://cve.now/CVE-2017-6651.md): A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that could allow them to… (no CVSS, Cisco WebEx Meetings Server)
- [CVE-2017-6657](https://cve.now/CVE-2017-6657.md): Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation. (no CVSS, Snort 3.0 All versions prior to build 233.)
- [CVE-2017-6658](https://cve.now/CVE-2017-6658.md): Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. (no CVSS, Snort 3.0 All versions prior to build 233.)
- [CVE-2017-7661](https://cve.now/CVE-2017-7661.md): Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. (no CVSS, Apache Software Foundation Apache CXF Fediz · org.apache… +2)
- [CVE-2017-7662](https://cve.now/CVE-2017-7662.md): Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple web application… (no CVSS, Apache Software Foundation Apache CXF Fediz · org.apache.cx…)
- [CVE-2017-6885](https://cve.now/CVE-2017-6885.md): An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera… (no CVSS, Flexera Software FlexNet Manager Suite)
- [CVE-2017-6886](https://cve.now/CVE-2017-6886.md): An error within the "parse\_tiff\_ifd()" function (internal/dcraw\_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt… (no CVSS, LibRaw)
- [CVE-2017-6887](https://cve.now/CVE-2017-6887.md): A boundary error within the "parse\_tiff\_ifd()" function (internal/dcraw\_common.cpp) in LibRaw versions before 0.18.2 can be exploited to… (no CVSS, LibRaw)
- [CVE-2014-9931](https://cve.now/CVE-2014-9931.md): A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app… (no CVSS, All Qualcomm Products)
- [CVE-2014-9932](https://cve.now/CVE-2014-9932.md): In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an… (no CVSS, All Qualcomm Products)
- [CVE-2014-9933](https://cve.now/CVE-2014-9933.md): Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not… (no CVSS, All Qualcomm Products)
- [CVE-2014-9934](https://cve.now/CVE-2014-9934.md): A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding. (no CVSS, All Qualcomm Products)
- [CVE-2014-9935](https://cve.now/CVE-2014-9935.md): In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android… (no CVSS, All Qualcomm Products)
- [CVE-2014-9936](https://cve.now/CVE-2014-9936.md): In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from… (no CVSS, All Qualcomm Products)
- [CVE-2014-9937](https://cve.now/CVE-2014-9937.md): In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel. (no CVSS, All Qualcomm Products)
- [CVE-2015-8995](https://cve.now/CVE-2015-8995.md): In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. (no CVSS, All Qualcomm Products)
- [CVE-2015-8996](https://cve.now/CVE-2015-8996.md): In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using… (no CVSS, All Qualcomm Products)
- [CVE-2015-8997](https://cve.now/CVE-2015-8997.md): In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF… (no CVSS, All Qualcomm Products)
- [CVE-2015-8998](https://cve.now/CVE-2015-8998.md): In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. (no CVSS, All Qualcomm Products)
- [CVE-2015-8999](https://cve.now/CVE-2015-8999.md): In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading… (no CVSS, All Qualcomm Products)
- [CVE-2015-9000](https://cve.now/CVE-2015-9000.md): In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using… (no CVSS, All Qualcomm Products)
- [CVE-2015-9001](https://cve.now/CVE-2015-9001.md): In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. (no CVSS, All Qualcomm Products)
- [CVE-2015-9002](https://cve.now/CVE-2015-9002.md): In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using… (no CVSS, All Qualcomm Products)
- [CVE-2015-9003](https://cve.now/CVE-2015-9003.md): In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel. (no CVSS, All Qualcomm Products)
- [CVE-2016-10237](https://cve.now/CVE-2016-10237.md): If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all… (no CVSS, All Qualcomm Products)
- [CVE-2016-10238](https://cve.now/CVE-2016-10238.md): In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue. (no CVSS, All Qualcomm Products)
- [CVE-2016-10239](https://cve.now/CVE-2016-10239.md): In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper… (no CVSS, All Qualcomm Products)
- [CVE-2016-10242](https://cve.now/CVE-2016-10242.md): A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the… (no CVSS, All Qualcomm Products)
- [CVE-2016-10372](https://cve.now/CVE-2016-10372.md): The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP… (no CVSS)
- [CVE-2017-7952](https://cve.now/CVE-2017-7952.md): INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter. (no CVSS)
- [CVE-2017-7953](https://cve.now/CVE-2017-7953.md): INFOR EAM V11.0 Build 201410 has XSS via comment fields. (no CVSS)
- [CVE-2017-8382](https://cve.now/CVE-2017-8382.md): admidio 3.2.8 has CSRF in adm\_program/modules/members/members\_function.php with an impact of deleting arbitrary user accounts. (no CVSS, admidio/admidio)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-05-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.