# CVEs published 2017-09-21

82 CVEs were published on September 21, 2017: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2017-14680](https://cve.now/CVE-2017-14680.md): ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document. (no CVSS)
- [CVE-2017-14681](https://cve.now/CVE-2017-14681.md): The daemon in P3Scan 3.0\_rc1 and earlier creates a p3scan.pid file after dropping privileges to a non-root account, which might allow… (no CVSS)
- [CVE-2017-14682](https://cve.now/CVE-2017-14682.md): GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow… (no CVSS)
- [CVE-2017-9281](https://cve.now/CVE-2017-9281.md): An integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability in Micro Focus VisiBroker 8.5 can lead to… (no CVSS)
- [CVE-2017-9282](https://cve.now/CVE-2017-9282.md): An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus… (no CVSS, Micro Focus VisiBroker)
- [CVE-2017-9283](https://cve.now/CVE-2017-9283.md): An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. (no CVSS, Micro Focus VisiBroker)
- [CVE-2017-12170](https://cve.now/CVE-2017-12170.md): Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration… (no CVSS, Red Hat pure-ftpd)
- [CVE-2017-7544](https://cve.now/CVE-2017-7544.md): libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif\_data\_save\_data\_entry function in libexif/exif-data.c… (no CVSS, Red Hat libexif)
- [CVE-2017-7549](https://cve.now/CVE-2017-7549.md): A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack… (no CVSS, Red Hat instack-undercloud · instack-undercloud +1)
- [CVE-2017-14652](https://cve.now/CVE-2017-14652.md): SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote… (no CVSS)
- [CVE-2017-14651](https://cve.now/CVE-2017-14651.md): WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add\_collection\_ajaxprocessor.jsp via the collectionName or parentPath… (no CVSS)
- [CVE-2017-14638](https://cve.now/CVE-2017-14638.md): AP4\_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL… (no CVSS)
- [CVE-2017-14639](https://cve.now/CVE-2017-14639.md): AP4\_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a… (no CVSS)
- [CVE-2017-14640](https://cve.now/CVE-2017-14640.md): A NULL pointer dereference was discovered in AP4\_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. (no CVSS)
- [CVE-2017-14641](https://cve.now/CVE-2017-14641.md): A NULL pointer dereference was discovered in the AP4\_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. (no CVSS)
- [CVE-2017-14642](https://cve.now/CVE-2017-14642.md): A NULL pointer dereference was discovered in the AP4\_HdlrAtom class in Bento4 version 1.5.0-617. (no CVSS)
- [CVE-2017-14643](https://cve.now/CVE-2017-14643.md): The AP4\_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based… (no CVSS)
- [CVE-2017-14644](https://cve.now/CVE-2017-14644.md): A heap-based buffer overflow was discovered in the AP4\_HdlrAtom class in Bento4 1.5.0-617. (no CVSS)
- [CVE-2017-14645](https://cve.now/CVE-2017-14645.md): A heap-based buffer over-read was discovered in AP4\_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. (no CVSS)
- [CVE-2017-14646](https://cve.now/CVE-2017-14646.md): The AP4\_AvccAtom and AP4\_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer… (no CVSS)
- [CVE-2017-14647](https://cve.now/CVE-2017-14647.md): A heap-based buffer overflow was discovered in AP4\_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. (no CVSS)
- [CVE-2017-14648](https://cve.now/CVE-2017-14648.md): A global buffer overflow was discovered in the iteration\_loop function in loop.c in BladeEnc version 0.94.2. (no CVSS)
- [CVE-2017-14649](https://cve.now/CVE-2017-14649.md): ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service… (no CVSS)
- [CVE-2017-14650](https://cve.now/CVE-2017-14650.md): A Remote Code Execution vulnerability has been found in the Horde\_Image library when using the "Im" backend that utilizes ImageMagick's… (no CVSS)
- [CVE-2015-1187](https://cve.now/CVE-2015-1187.md): The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping\_addr parameter to ping.c (CVSS 9.8, KEV)
- [CVE-2015-3887](https://cve.now/CVE-2015-3887.md): Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse… (no CVSS)
- [CVE-2017-12928](https://cve.now/CVE-2017-12928.md): A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows remote attackers… (no CVSS)
- [CVE-2017-12929](https://cve.now/CVE-2017-12929.md): Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version \>1.5.10 allows remote authenticated users to upload… (no CVSS)
- [CVE-2017-12930](https://cve.now/CVE-2017-12930.md): SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version \>1.5.10 allows remote unauthenticated users to access the web… (no CVSS)
- [CVE-2017-14320](https://cve.now/CVE-2017-14320.md): Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter uploaded files. (no CVSS)
- [CVE-2017-14321](https://cve.now/CVE-2017-14321.md): Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote… (no CVSS)
- [CVE-2017-10996](https://cve.now/CVE-2017-10996.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in c\_show(), due to… (no CVSS)
- [CVE-2017-10997](https://cve.now/CVE-2017-10997.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause… (no CVSS)
- [CVE-2017-10998](https://cve.now/CVE-2017-10998.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio\_aio\_ion\_lookup\_vaddr, the buffer length, which is… (no CVSS)
- [CVE-2017-10999](https://cve.now/CVE-2017-10999.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET\_IOCTL\_ADD\_MUX\_CHANNEL in… (no CVSS)
- [CVE-2017-11000](https://cve.now/CVE-2017-11000.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect… (no CVSS)
- [CVE-2017-11001](https://cve.now/CVE-2017-11001.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, the length of the MAC address is not checked which may… (no CVSS)
- [CVE-2017-11002](https://cve.now/CVE-2017-11002.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read… (no CVSS)
- [CVE-2017-11040](https://cve.now/CVE-2017-11040.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more… (no CVSS)
- [CVE-2017-11041](https://cve.now/CVE-2017-11041.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an output buffer is accessed in one thread and can be… (no CVSS)
- [CVE-2017-12153](https://cve.now/CVE-2017-12153.md): A security flaw was discovered in the nl80211\_set\_rekey\_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. (no CVSS, kernel since v3.1-rc1 through)
- [CVE-2017-8247](https://cve.now/CVE-2017-8247.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open… (no CVSS)
- [CVE-2017-8250](https://cve.now/CVE-2017-8250.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables "nr\_cmds" and "nr\_bos" number… (no CVSS)
- [CVE-2017-8251](https://cve.now/CVE-2017-8251.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msm\_isp\_check\_stream\_cfg\_cmd &… (no CVSS)
- [CVE-2017-8277](https://cve.now/CVE-2017-8277.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function msm\_dba\_register\_client, if the client… (no CVSS)
- [CVE-2017-8278](https://cve.now/CVE-2017-8278.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a… (no CVSS)
- [CVE-2017-8280](https://cve.now/CVE-2017-8280.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve… (no CVSS)
- [CVE-2017-8281](https://cve.now/CVE-2017-8281.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory… (no CVSS)
- [CVE-2017-9676](https://cve.now/CVE-2017-9676.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can… (no CVSS)
- [CVE-2017-9677](https://cve.now/CVE-2017-9677.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm\_compr\_ioctl\_shared, variable… (no CVSS)
- [CVE-2017-9720](https://cve.now/CVE-2017-9720.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera driver, an… (no CVSS)
- [CVE-2017-9724](https://cve.now/CVE-2017-9724.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to… (no CVSS)
- [CVE-2017-9725](https://cve.now/CVE-2017-9725.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size… (no CVSS)
- [CVE-2015-0276](https://cve.now/CVE-2015-0276.md): Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2. (no CVSS, kallithea)
- [CVE-2015-3296](https://cve.now/CVE-2015-3296.md): Multiple cross-site scripting (XSS) vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web script or HTML via… (no CVSS, nodebb · nodebb-plugin-markdown)
- [CVE-2015-4706](https://cve.now/CVE-2015-4706.md): Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS, ipython)
- [CVE-2015-5284](https://cve.now/CVE-2015-5284.md): ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world… (no CVSS)
- [CVE-2015-8559](https://cve.now/CVE-2015-8559.md): The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages. (no CVSS)
- [CVE-2017-14160](https://cve.now/CVE-2017-14160.md): The bark\_noise\_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds… (no CVSS)
- [CVE-2017-14245](https://cve.now/CVE-2017-14245.md): An out of bounds read in the function d2alaw\_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information… (no CVSS)
- [CVE-2017-14246](https://cve.now/CVE-2017-14246.md): An out of bounds read in the function d2ulaw\_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information… (no CVSS)
- [CVE-2017-14635](https://cve.now/CVE-2017-14635.md): In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can… (no CVSS)
- [CVE-2017-14628](https://cve.now/CVE-2017-14628.md): In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in\_pcx.cpp. (no CVSS)
- [CVE-2017-14629](https://cve.now/CVE-2017-14629.md): In sam2p 0.49.3, the in\_xpm\_reader function in in\_xpm.cpp has an integer signedness error, leading to a crash when writing to an… (no CVSS)
- [CVE-2017-14630](https://cve.now/CVE-2017-14630.md): In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in\_pcx.cpp, leading to an invalid write operation. (no CVSS)
- [CVE-2017-14631](https://cve.now/CVE-2017-14631.md): In sam2p 0.49.3, the pcxLoadRaster function in in\_pcx.cpp has an integer signedness error leading to a heap-based buffer overflow. (no CVSS)
- [CVE-2017-14632](https://cve.now/CVE-2017-14632.md): Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis\_analysis\_headerout() in… (no CVSS)
- [CVE-2017-14633](https://cve.now/CVE-2017-14633.md): In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0\_forward() in mapping0.c, which may… (no CVSS)
- [CVE-2017-14634](https://cve.now/CVE-2017-14634.md): In libsndfile 1.0.28, a divide-by-zero error exists in the function double64\_init() in double64.c, which may lead to DoS when playing a… (no CVSS)
- [CVE-2017-12214](https://cve.now/CVE-2017-12214.md): A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality for Cisco Unified… (no CVSS, Cisco Unified Customer Voice Portal)
- [CVE-2017-12215](https://cve.now/CVE-2017-12215.md): A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an… (no CVSS, Cisco Email Security Appliance)
- [CVE-2017-12219](https://cve.now/CVE-2017-12219.md): A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an… (no CVSS, Cisco Small Business SPA300, SPA500, and SPA51x Series IP P…)
- [CVE-2017-12248](https://cve.now/CVE-2017-12248.md): A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to… (no CVSS, Cisco Unified Intelligence Center)
- [CVE-2017-12250](https://cve.now/CVE-2017-12250.md): A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker… (no CVSS, Cisco Wide Area Application Services)
- [CVE-2017-12252](https://cve.now/CVE-2017-12252.md): A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading… (no CVSS, Cisco FindIT)
- [CVE-2017-12253](https://cve.now/CVE-2017-12253.md): A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions. (no CVSS, Cisco Unified Intelligence Center)
- [CVE-2017-12254](https://cve.now/CVE-2017-12254.md): A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to perform a… (no CVSS, Cisco Unified Intelligence Center)
- [CVE-2017-12255](https://cve.now/CVE-2017-12255.md): A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell access. (no CVSS, Cisco UCS Central Software)
- [CVE-2017-14624](https://cve.now/CVE-2017-14624.md): ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c. (no CVSS)
- [CVE-2017-14625](https://cve.now/CVE-2017-14625.md): ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel\_output\_create in coders/sixel.c. (no CVSS)
- [CVE-2017-14626](https://cve.now/CVE-2017-14626.md): ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel\_decode in coders/sixel.c. (no CVSS)
- [CVE-2017-6720](https://cve.now/CVE-2017-6720.md): A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote… (no CVSS, Cisco Small Business Managed Switches)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-09-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.