# CVEs published 2017-08-25

36 CVEs were published on August 25, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-12816](https://cve.now/CVE-2017-12816.md): In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used… (no CVSS, Kaspersky Lab Kaspersky Internet Security for Android)
- [CVE-2017-12817](https://cve.now/CVE-2017-12817.md): In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted. (no CVSS, Kaspersky Lab Kaspersky Internet Security for Android)
- [CVE-2017-12694](https://cve.now/CVE-2017-12694.md): A Directory Traversal issue was discovered in SpiderControl SCADA Web Server. (no CVSS, SpiderControl SCADA Web Server)
- [CVE-2017-12707](https://cve.now/CVE-2017-12707.md): A Stack-based Buffer Overflow issue was discovered in SpiderControl SCADA MicroBrowser Versions 1.6.30.144 and prior. (no CVSS, SpiderControl SCADA MicroBrowser)
- [CVE-2017-12857](https://cve.now/CVE-2017-12857.md): Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0… (no CVSS)
- [CVE-2017-7926](https://cve.now/CVE-2017-7926.md): A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). (no CVSS, OSIsoft PI Web API)
- [CVE-2017-7930](https://cve.now/CVE-2017-7930.md): An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. (no CVSS, OSIsoft PI Server)
- [CVE-2017-7934](https://cve.now/CVE-2017-7934.md): An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. (no CVSS, OSIsoft PI Server)
- [CVE-2017-9640](https://cve.now/CVE-2017-9640.md): A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL… (no CVSS, Automated Logic Corporation WebCTRL, i-VU, SiteScan)
- [CVE-2017-9644](https://cve.now/CVE-2017-9644.md): An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and… (no CVSS, Automated Logic Corporation WebCTRL, i-VU, SiteScan)
- [CVE-2017-9650](https://cve.now/CVE-2017-9650.md): An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan… (no CVSS, Automated Logic Corporation WebCTRL, i-VU, SiteScan)
- [CVE-2014-7857](https://cve.now/CVE-2014-7857.md): D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325… (no CVSS)
- [CVE-2014-7858](https://cve.now/CVE-2014-7858.md): The check\_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the… (no CVSS)
- [CVE-2014-7859](https://cve.now/CVE-2014-7859.md): Stack-based buffer overflow in login\_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03… (no CVSS)
- [CVE-2014-7860](https://cve.now/CVE-2014-7860.md): The web/web\_file/fb\_publish.php script in D-Link DNS-320L before 1.04b12 and DNS-327L before 1.03b04 Build0119 does not authenticate… (no CVSS)
- [CVE-2014-9564](https://cve.now/CVE-2014-9564.md): CRLF injection vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware before 3.4.1110 allows… (no CVSS)
- [CVE-2014-9637](https://cve.now/CVE-2014-9637.md): GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory consumption and segmentation fault) via a crafted… (no CVSS)
- [CVE-2015-1324](https://cve.now/CVE-2015-1324.md): Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before… (no CVSS)
- [CVE-2015-1325](https://cve.now/CVE-2015-1325.md): Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before… (no CVSS)
- [CVE-2015-1395](https://cve.now/CVE-2015-1395.md): Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to… (no CVSS)
- [CVE-2015-3206](https://cve.now/CVE-2015-3206.md): The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers… (no CVSS, kerberos · pykerberos)
- [CVE-2015-3211](https://cve.now/CVE-2015-3211.md): php-fpm allows local users to write to or create arbitrary files via a symlink attack. (no CVSS)
- [CVE-2015-3257](https://cve.now/CVE-2015-3257.md): Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to… (no CVSS, zendframework/zend-diactoros)
- [CVE-2015-4017](https://cve.now/CVE-2015-4017.md): Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules. (no CVSS, salt)
- [CVE-2015-4180](https://cve.now/CVE-2015-4180.md): Directory traversal vulnerability in get\_file.php in phpMyBackupPro 2.1 through 2.4 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2015-4181](https://cve.now/CVE-2015-4181.md): Directory traversal vulnerability in get\_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2015-5700](https://cve.now/CVE-2015-5700.md): mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. (no CVSS)
- [CVE-2015-5701](https://cve.now/CVE-2015-5701.md): mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files via a symlink… (no CVSS)
- [CVE-2017-13697](https://cve.now/CVE-2017-13697.md): controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable. (no CVSS)
- [CVE-2016-5816](https://cve.now/CVE-2016-5816.md): A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455… (no CVSS)
- [CVE-2017-12703](https://cve.now/CVE-2017-12703.md): A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355… (no CVSS, Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455)
- [CVE-2017-12709](https://cve.now/CVE-2017-12709.md): A Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions… (no CVSS, Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455)
- [CVE-2017-13692](https://cve.now/CVE-2017-13692.md): In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated… (no CVSS)
- [CVE-2017-13693](https://cve.now/CVE-2017-13693.md): The acpi\_ds\_create\_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand… (no CVSS)
- [CVE-2017-13694](https://cve.now/CVE-2017-13694.md): The acpi\_ps\_complete\_final\_op() function in drivers/acpi/acpica/psobject.c in the Linux kernel through 4.12.9 does not flush the node and… (no CVSS)
- [CVE-2017-13695](https://cve.now/CVE-2017-13695.md): The acpi\_ns\_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-08-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.