CVEs published October 3, 2017
43 CVEs were published on October 3, 2017: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 43
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 42
- Now in CISA KEV
- 1
- Fix available
- 2
Most affected products
- Google Android
- 22
- Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products…
- 5
- Apache Software Foundation Apache Impala
- 1
- Apache Software Foundation Apache Tomcat · org.apache.to… +1
- 1
- Cloud Controller VM capi-release versions 1.33.0 and later,…
- 1
- Cloud Foundry router routing-release all versions prior to…
- 1
- IBM AIX
- 1
- IBM Integration Bus
- 1
- tough-cookie
- 1
High 1
Medium, low and unrated 42
- CVE-2017-0806An elevation of privilege vulnerability in the Android framework (gatekeeperresponse).Google Android
- CVE-2017-0807An elevation of privilege vulnerability in the Android framework (ui framework).Google Android
- CVE-2017-0808An information disclosure vulnerability in the Android framework (file system).Google Android
- CVE-2017-0809A remote code execution vulnerability in the Android media framework (libstagefright).Google Android
- CVE-2017-0810A remote code execution vulnerability in the Android media framework (libmpeg2).Google Android
- CVE-2017-0811A remote code execution vulnerability in the Android media framework (libhevc).Google Android
- CVE-2017-0812An elevation of privilege vulnerability in the Android media framework (audio hal).Google Android
- CVE-2017-0813A denial of service vulnerability in the Android media framework (libstagefright).Google Android
- CVE-2017-0814An information disclosure vulnerability in the Android media framework (n/a).Google Android
- CVE-2017-0815An information disclosure vulnerability in the Android media framework (libeffects).Google Android
- CVE-2017-0816An information disclosure vulnerability in the Android media framework (libeffects).Google Android
- CVE-2017-0817An information disclosure vulnerability in the Android media framework (libstagefright).Google Android
- CVE-2017-0818A vulnerability in the Android media framework (n/a).
- CVE-2017-0819A vulnerability in the Android media framework (n/a).Google Android
- CVE-2017-0820A vulnerability in the Android media framework (n/a).Google Android
- CVE-2017-0822An elevation of privilege vulnerability in the Android system (camera).Google Android
- CVE-2017-0823An information disclosure vulnerability in the Android system (rild).Google Android
- CVE-2017-0824An elevation of privilege vulnerability in the Broadcom wifi driver.Google Android
- CVE-2017-0825An information disclosure vulnerability in the Broadcom wifi driver.Google Android
- CVE-2017-0826An elevation of privilege vulnerability in the HTC bootloader.Google Android
- CVE-2017-0827An elevation of privilege vulnerability in the MediaTek soc driver.Google Android
- CVE-2017-0828An elevation of privilege vulnerability in the Huawei bootloader.Google Android
- CVE-2017-0829An elevation of privilege vulnerability in the Motorola bootloader.Google Android
- CVE-2017-15011The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote…
- CVE-2017-12166OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly…
Show all 42 entriesShow fewer entries
- CVE-2017-1126IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive information about…IBM Integration Bus
- CVE-2017-1541A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy…IBM AIX
- CVE-2017-15008PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all sensor titles, related to incorrect error…
- CVE-2017-15009PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page), via the errormsg…
- CVE-2017-15010A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js.tough-cookie
- CVE-2017-12818Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55…Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products…
- CVE-2017-12819Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and…Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products…
- CVE-2017-12820Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK…Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products…
- CVE-2017-12821Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote…Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products…
- CVE-2017-12822Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE…Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products…
- CVE-2017-14991The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive information from…
- CVE-2017-14994ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (NULL pointer dereference) via…
- CVE-2017-14995The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2…
- CVE-2017-14997GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow…
- CVE-2017-8047In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it…Cloud Foundry router routing-release all versions prior to…
- CVE-2017-8048In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original…Cloud Controller VM capi-release versions 1.33.0 and later,…
- CVE-2017-9792In Apache Impala (incubating) before 2.10.0, a malicious user with "ALTER" permissions on an Impala table can access any other Kudu table…Apache Software Foundation Apache Impala