# CVEs published 2017-07-30

14 CVEs were published on July 30, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-11752](https://cve.now/CVE-2017-11752.md): The ReadMAGICKImage function in coders/magick.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak)… (no CVSS)
- [CVE-2017-11753](https://cve.now/CVE-2017-11753.md): The GetImageDepth function in MagickCore/attribute.c in ImageMagick 7.0.6-4 might allow remote attackers to cause a denial of service… (no CVSS)
- [CVE-2017-11754](https://cve.now/CVE-2017-11754.md): The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via… (no CVSS)
- [CVE-2017-11755](https://cve.now/CVE-2017-11755.md): The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via… (no CVSS)
- [CVE-2017-11756](https://cve.now/CVE-2017-11756.md): In Earcms Ear Music through 4.1 build 20170710, remote authenticated users can execute arbitrary PHP code by changing the allowable… (no CVSS)
- [CVE-2017-11692](https://cve.now/CVE-2017-11692.md): The function "Token& Scanner::peek" in scanner.cpp in yaml-cpp 0.5.3 and earlier allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2017-11750](https://cve.now/CVE-2017-11750.md): The ReadOneJNGImage function in coders/png.c in ImageMagick 6.9.9-4 and 7.0.6-4 allows remote attackers to cause a denial of service (NULL… (no CVSS)
- [CVE-2017-11751](https://cve.now/CVE-2017-11751.md): The WritePICONImage function in coders/xpm.c in ImageMagick 7.0.6-4 allows remote attackers to cause a denial of service (memory leak) via… (no CVSS)
- [CVE-2017-11746](https://cve.now/CVE-2017-11746.md): Tenshi 0.15 creates a tenshi.pid file after dropping privileges to a non-root account, which might allow local users to kill arbitrary… (no CVSS)
- [CVE-2017-11747](https://cve.now/CVE-2017-11747.md): main.c in Tinyproxy 1.8.4 and earlier creates a /run/tinyproxy/tinyproxy.pid file after dropping privileges to a non-root account, which… (no CVSS)
- [CVE-2017-11748](https://cve.now/CVE-2017-11748.md): VIT Spider Player 2.5.3 has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll, olepro32.dll, dsound.dll, or… (no CVSS)
- [CVE-2017-11749](https://cve.now/CVE-2017-11749.md): InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file. (no CVSS)
- [CVE-2017-11744](https://cve.now/CVE-2017-11744.md): In MODX Revolution 2.5.7, the "key" and "name" parameters in the System Settings module are vulnerable to XSS. (no CVSS)
- [CVE-2017-11742](https://cve.now/CVE-2017-11742.md): The writeRandomBytes\_RtlGenRandom function in xmlparse.c in libexpat in Expat 2.2.1 and 2.2.2 on Windows allows local users to gain… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-07-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.