# CVEs published 2017-09-04

12 CVEs were published on September 4, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-14135](https://cve.now/CVE-2017-14135.md): enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to… (no CVSS)
- [CVE-2017-14136](https://cve.now/CVE-2017-14136.md): OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading… (no CVSS, opencv-python · opencv-contrib-python)
- [CVE-2017-14137](https://cve.now/CVE-2017-14137.md): ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a… (no CVSS)
- [CVE-2017-14138](https://cve.now/CVE-2017-14138.md): ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases… (no CVSS)
- [CVE-2017-14139](https://cve.now/CVE-2017-14139.md): ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c. (no CVSS)
- [CVE-2017-14123](https://cve.now/CVE-2017-14123.md): Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. (no CVSS)
- [CVE-2017-14126](https://cve.now/CVE-2017-14126.md): The Participants Database plugin before 1.7.5.10 for WordPress has XSS. (no CVSS)
- [CVE-2017-14127](https://cve.now/CVE-2017-14127.md): Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI\_Fw\_v7 devices allows remote attackers to execute… (no CVSS)
- [CVE-2017-14128](https://cve.now/CVE-2017-14128.md): The decode\_line\_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29… (no CVSS)
- [CVE-2017-14129](https://cve.now/CVE-2017-14129.md): The read\_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29… (no CVSS)
- [CVE-2017-14130](https://cve.now/CVE-2017-14130.md): The \_bfd\_elf\_parse\_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU… (no CVSS)
- [CVE-2017-14132](https://cve.now/CVE-2017-14132.md): JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-09-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.