# CVEs published 2017-09-01 30 CVEs were published on September 1, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2016-1895](https://cve.now/CVE-2016-1895.md): NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related… (no CVSS) - [CVE-2017-12421](https://cve.now/CVE-2017-12421.md): NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the storage controller… (no CVSS) - [CVE-2017-12423](https://cve.now/CVE-2017-12423.md): NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines (SVMs)… (no CVSS) - [CVE-2017-12691](https://cve.now/CVE-2017-12691.md): The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption)… (no CVSS) - [CVE-2017-12692](https://cve.now/CVE-2017-12692.md): The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory… (no CVSS) - [CVE-2017-12693](https://cve.now/CVE-2017-12693.md): The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption)… (no CVSS) - [CVE-2017-12871](https://cve.now/CVE-2017-12871.md): The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.x through 1.14.11 makes it easier for context-dependent… (no CVSS, simplesamlphp/simplesamlphp) - [CVE-2017-12872](https://cve.now/CVE-2017-12872.md): The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML\_Session class in SimpleSAMLphp 1.14.11 and earlier allow… (no CVSS, simplesamlphp/simplesamlphp) - [CVE-2017-12873](https://cve.now/CVE-2017-12873.md): SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified… (no CVSS, simplesamlphp/simplesamlphp) - [CVE-2017-12874](https://cve.now/CVE-2017-12874.md): The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in… (no CVSS, simplesamlphp/simplesamlphp-module-infocard) - [CVE-2017-14053](https://cve.now/CVE-2017-14053.md): NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS… (no CVSS) - [CVE-2017-14105](https://cve.now/CVE-2017-14105.md): HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore… (no CVSS) - [CVE-2017-14107](https://cve.now/CVE-2017-14107.md): The \_zip\_read\_eocd64 function in zip\_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a… (no CVSS) - [CVE-2017-14106](https://cve.now/CVE-2017-14106.md): The tcp\_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service… (no CVSS) - [CVE-2017-10829](https://cve.now/CVE-2017-10829.md): Untrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions distributed through the website till 2017… (no CVSS, NIPPON TELEGRAPH AND TELEPHONE EAST Remote Support Tool · N…) - [CVE-2017-10848](https://cve.now/CVE-2017-10848.md): Untrusted search path vulnerability in Installers for DocuWorks 8.0.7 and earlier and DocuWorks Viewer Light published in Jul 2017 and… (no CVSS, Fuji Xerox Co. Installer for DocuWorks) - [CVE-2017-10849](https://cve.now/CVE-2017-10849.md): Untrusted search path vulnerability in Self-extracting document generated by DocuWorks 8.0.7 and earlier allows an attacker to gain… (no CVSS, Fuji Xerox Co. Self-extracting document generated by DocuWo…) - [CVE-2017-10850](https://cve.now/CVE-2017-10850.md): Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI… (no CVSS, Fuji Xerox Co. Installer of ART EX Driver for ApeosPort-… +8) - [CVE-2017-10851](https://cve.now/CVE-2017-10851.md): Untrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and earlier allows an attacker to gain… (no CVSS, Fuji Xerox Co. Installer for ContentsBridge Utility for Win…) - [CVE-2015-7746](https://cve.now/CVE-2015-7746.md): NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and (1) obtain sensitive… (no CVSS) - [CVE-2017-12868](https://cve.now/CVE-2017-12868.md): The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows… (no CVSS, simplesamlphp/simplesamlphp) - [CVE-2017-12869](https://cve.now/CVE-2017-12869.md): The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an… (no CVSS, simplesamlphp/simplesamlphp) - [CVE-2017-12870](https://cve.now/CVE-2017-12870.md): SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the… (no CVSS, simplesamlphp/simplesamlphp) - [CVE-2017-13672](https://cve.now/CVE-2017-13672.md): QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of… (no CVSS) - [CVE-2017-13674](https://cve.now/CVE-2017-13674.md): Symantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability. (no CVSS, Symantec ProxyClient) - [CVE-2017-13711](https://cve.now/CVE-2017-13711.md): Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of… (no CVSS) - [CVE-2017-14103](https://cve.now/CVE-2017-14103.md): The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after… (no CVSS) - [CVE-2017-3897](https://cve.now/CVE-2017-3897.md): A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and… (no CVSS, McAfee Live Safe · McAfee Security Scan Plus) - [CVE-2017-3898](https://cve.now/CVE-2017-3898.md): A man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in McAfee LiveSafe (MLS) versions prior to… (no CVSS, McAfee Live Safe) - [CVE-2017-14102](https://cve.now/CVE-2017-14102.md): MIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2017-09-01 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.