# CVEs published 2017-08-17

35 CVEs were published on August 17, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-12907](https://cve.now/CVE-2017-12907.md): Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the url path to usersearch.php. (no CVSS)
- [CVE-2017-12908](https://cve.now/CVE-2017-12908.md): SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr… (no CVSS)
- [CVE-2017-12909](https://cve.now/CVE-2017-12909.md): SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid… (no CVSS)
- [CVE-2017-12910](https://cve.now/CVE-2017-12910.md): SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter. (no CVSS)
- [CVE-2017-6710](https://cve.now/CVE-2017-6710.md): A vulnerability in the Cisco Virtual Network Function (VNF) Element Manager could allow an authenticated, remote attacker to elevate… (no CVSS, Cisco Systems Virtual Network Function (VNF) Element Manager)
- [CVE-2017-6767](https://cve.now/CVE-2017-6767.md): A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to gain higher… (no CVSS, Cisco Systems Application Policy Infrastructure Controller)
- [CVE-2017-6768](https://cve.now/CVE-2017-6768.md): A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application Policy… (no CVSS, Cisco Systems Application Policy Infrastructure Controller)
- [CVE-2017-6771](https://cve.now/CVE-2017-6771.md): A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to… (no CVSS, Cisco Systems Ultra Services Framework)
- [CVE-2017-6772](https://cve.now/CVE-2017-6772.md): A vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to view sensitive information. (no CVSS, Cisco Systems Elastic Services Controller)
- [CVE-2017-6773](https://cve.now/CVE-2017-6773.md): A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an… (no CVSS, Cisco Systems StarOS for ASR 5000 Series Aggregated Service…)
- [CVE-2017-6774](https://cve.now/CVE-2017-6774.md): A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an… (no CVSS, Cisco Systems StarOS for ASR 5000 Series Aggregated Service…)
- [CVE-2017-6775](https://cve.now/CVE-2017-6775.md): A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an… (no CVSS, Cisco Systems StarOS for ASR 5000 Series Aggregated Service…)
- [CVE-2017-6776](https://cve.now/CVE-2017-6776.md): A vulnerability in the web framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to conduct… (no CVSS, Cisco Systems Elastic Services Controller)
- [CVE-2017-6777](https://cve.now/CVE-2017-6777.md): A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to… (no CVSS, Cisco Systems Elastic Services Controller)
- [CVE-2017-6778](https://cve.now/CVE-2017-6778.md): A vulnerability in the Elastic Services Controller (ESC) web interface of the Cisco Ultra Services Platform could allow an authenticated… (no CVSS, Cisco Systems Ultra Services Platform)
- [CVE-2017-6781](https://cve.now/CVE-2017-6781.md): A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an… (no CVSS, Cisco Systems Policy Suite)
- [CVE-2017-6782](https://cve.now/CVE-2017-6782.md): A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to modify… (no CVSS, Cisco Systems Prime Infrastructure)
- [CVE-2017-6783](https://cve.now/CVE-2017-6783.md): A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security… (no CVSS, Cisco Systems Web Security Appliance · Cisco Systems Ema… +1)
- [CVE-2017-6784](https://cve.now/CVE-2017-6784.md): A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated… (no CVSS, Cisco Systems RV340, RV345, and RV345P Dual WAN Gigabit VPN…)
- [CVE-2017-6785](https://cve.now/CVE-2017-6785.md): A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an… (no CVSS, Cisco Systems Unified Communications Manager)
- [CVE-2017-6786](https://cve.now/CVE-2017-6786.md): A vulnerability in Cisco Elastic Services Controller could allow an authenticated, local, unprivileged attacker to access sensitive… (no CVSS, Cisco Systems Elastic Services Controller)
- [CVE-2017-6788](https://cve.now/CVE-2017-6788.md): The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an… (no CVSS, Cisco Systems AnyConnect WebLaunch)
- [CVE-2017-6790](https://cve.now/CVE-2017-6790.md): A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) could allow an… (no CVSS, Cisco Systems TelePresence Video Communication Server)
- [CVE-2017-7555](https://cve.now/CVE-2017-7555.md): Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. (no CVSS, Red Hat augeas)
- [CVE-2017-7556](https://cve.now/CVE-2017-7556.md): Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their… (no CVSS, Red Hat hawtio · io.hawt:project)
- [CVE-2011-0469](https://cve.now/CVE-2011-0469.md): Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011. (no CVSS, Micro Focus openSUSE)
- [CVE-2017-11661](https://cve.now/CVE-2017-11661.md): The \_WM\_SetupMidiEvent function in internal\_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and… (no CVSS)
- [CVE-2017-11662](https://cve.now/CVE-2017-11662.md): The \_WM\_ParseNewMidi function in f\_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via… (no CVSS)
- [CVE-2017-11663](https://cve.now/CVE-2017-11663.md): The \_WM\_SetupMidiEvent function in internal\_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and… (no CVSS)
- [CVE-2017-11664](https://cve.now/CVE-2017-11664.md): The \_WM\_SetupMidiEvent function in internal\_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and… (no CVSS)
- [CVE-2017-12441](https://cve.now/CVE-2017-12441.md): The row\_is\_empty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash)… (no CVSS)
- [CVE-2017-12442](https://cve.now/CVE-2017-12442.md): The row\_is\_empty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash)… (no CVSS)
- [CVE-2017-12443](https://cve.now/CVE-2017-12443.md): The mdjvu\_bitmap\_pack\_row function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read and application… (no CVSS)
- [CVE-2017-12444](https://cve.now/CVE-2017-12444.md): The mdjvu\_bitmap\_get\_bounding\_box function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read and… (no CVSS)
- [CVE-2017-12445](https://cve.now/CVE-2017-12445.md): The JB2BitmapCoder::code\_row\_by\_refinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of service (invalid memory read… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-08-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.