CVEs published October 13, 2017
98 CVEs were published on October 13, 2017: 3 critical, 16 high. 2 are now in CISA KEV.
- Published
- 98
- Critical
- 3
- High
- 16
- Medium
- 8
- Low
- 0
- Unrated
- 71
- Now in CISA KEV
- 2
- Fix available
- 11
Most affected products
- Juniper Networks Junos OS
- 18
- ChakraCore, Microsoft Edge
- 6
- ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- 6
- Microsoft Internet Explorer
- 5
- Microsoft Windows Kernel
- 5
- Juniper Networks Junos Space
- 4
- Microsoft Edge
- 4
- Microsoft Graphics Component
- 4
- Microsoft Server Block Message
- 3
- Microsoft SharePoint Enterprise Server
- 3
Critical 3
High 16
- CVE-2016-1261Junos: vulnerabilities in J-Web (CVE-2016-1261)Juniper Networks Junos OS
- CVE-2016-4921Junos: IPv6 denial of service vulnerability due to resource exhaustion (CVE-2016-4921)Juniper Networks Junos OS
- CVE-2016-4922Junos: Privilege escalation vulnerabilities in Junos CLIJuniper Networks Junos OS
- CVE-2016-4923Junos J-Web: Cross Site Scripting VulnerabilityJuniper Networks Junos OS
- CVE-2016-4924vMX: Information leak vulnerabilityJuniper Networks Junos OS
- CVE-2016-4925JUNOSe: Line Card Reset: processor exception 0x68616c74 (halt) task: scheduler, upon receipt of crafted IPv6 packetJuniper Networks JunosE
- CVE-2017-10607Junos: rpd core due to receipt of specially crafted BGP packetJuniper Networks Junos OS
- CVE-2017-10608SRX series: Junos OS: SRX series using IPv6 Sun/MS-RPC ALGs may experience flowd crash on processing packets.Juniper Networks Junos OS
- CVE-2017-10610SRX Series: Embedded ICMP may cause the flowd process to crashJuniper Networks Junos OS
- CVE-2017-10612Junos Space: Persistent Cross site scripting in Junos SpaceJuniper Networks Junos Space
- CVE-2017-10619Junos: SRX cluster denial of service vulnerability in flowd due to multicast packetsJuniper Networks Junos OS
- CVE-2017-10620SRX Series: Antivirus updates are downloaded without verificationJuniper Networks Junos OS
- CVE-2017-10623Junos Space: Insufficient verification of cluster messagesJuniper Networks Junos Space
- CVE-2017-10624Junos Space: Insufficient verification of node certificates.Juniper Networks Junos Space
- CVE-2017-11774Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how MicrosMicrosoft Outlook
- CVE-2017-11826Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, WoMicrosoft Office
Medium, low and unrated 79
- CVE-2017-10606SRX Series: Cryptographic weakness in SRX300 Series TPM FirmwareJuniper Networks Junos OS
- CVE-2017-10611Junos: EX Series PFE and MX MPC7E/8E/9E PFE crash when fetching interface stats with 'extended-statistics' enabledJuniper Networks Junos OS
- CVE-2017-10613Junos OS: A kernel hang may occur due to a specific loopback filter action commandJuniper Networks Junos OS
- CVE-2017-10614Junos OS: A remote unauthenticated attacker can consume large amounts of CPU and/or memory through telnetdJuniper Networks Junos OS
- CVE-2017-10616Contrail: hard coded credentialsJuniper Networks Contrail
- CVE-2017-10617Contrail: XML External Entity (XXE) vulnerabilityJuniper Networks Contrail
- CVE-2017-10618Junos: RPD core due to BGP UPDATE with malformed optional transitive attributesJuniper Networks Junos OS
- CVE-2017-10621Junos OS: Denial of service vulnerability in telnetdJuniper Networks Junos OS
- CVE-2017-6223Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command…Brocade Communications Systems Zone Director Controller Fir…
- CVE-2017-6224Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus…Brocade Communications Systems Zone Director Controller and…
- CVE-2017-15012OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the input of the…
- CVE-2017-15013OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an…
- CVE-2017-15014OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows…
- CVE-2017-15276OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an…
- CVE-2016-6815In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.Apache Software Foundation Apache Ranger · org.apache.range…
- CVE-2017-11762The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and…Microsoft Graphics Component
- CVE-2017-11763The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and…Microsoft Graphics Component
- CVE-2017-11765The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…Microsoft Windows Kernel
- CVE-2017-11769The Microsoft Windows TRIE component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code…Microsoft Windows TRIE
- CVE-2017-11771The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…Microsoft Windows Search
- CVE-2017-11772The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…Microsoft Windows Search
- CVE-2017-11775Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site…Microsoft SharePoint Enterprise Server
- CVE-2017-11776Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user email content, aka…Microsoft Outlook
- CVE-2017-11777Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site…Microsoft SharePoint Enterprise Server
- CVE-2017-11779The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10…Microsoft Windows Domain Name System
Show all 79 entriesShow fewer entries
- CVE-2017-11780The Server Message Block 1.0 (SMBv1) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold…Microsoft Server Message Block
- CVE-2017-11781The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…Microsoft Server Block Message
- CVE-2017-11782The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege…Microsoft Server Block Message
- CVE-2017-11783Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an…Microsoft Windows
- CVE-2017-11784The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…Microsoft Windows Kernel
- CVE-2017-11785The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…Microsoft Windows Kernel
- CVE-2017-11786Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be…Microsoft Skype for Business
- CVE-2017-11790Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and…Microsoft Internet Explorer
- CVE-2017-11792ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2017-11793Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and…Microsoft Internet Explorer
- CVE-2017-11794Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to how…Microsoft Edge
- CVE-2017-11796ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2017-11797ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine…Microsoft ChakraCore · Microsoft.ChakraCore
- CVE-2017-11798Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…Microsoft Edge
- CVE-2017-11799ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute…ChakraCore, Microsoft Edge
- CVE-2017-11800Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the…Microsoft Edge
- CVE-2017-11801ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine…Microsoft ChakraCore · Microsoft.ChakraCore
- CVE-2017-11802ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute…ChakraCore, Microsoft Edge
- CVE-2017-11804ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute…ChakraCore, Microsoft Edge
- CVE-2017-11805ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2017-11806ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2017-11807ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2017-11808ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute…ChakraCore, Microsoft Edge
- CVE-2017-11809ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute…ChakraCore, Microsoft Edge
- CVE-2017-11810Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and…Microsoft Internet Explorer
- CVE-2017-11811ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute…
- CVE-2017-11812ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary…ChakraCore, Microsoft Edge
- CVE-2017-11813Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2…Microsoft Internet Explorer
- CVE-2017-11814The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…Microsoft Windows Kernel
- CVE-2017-11815The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…Microsoft Server Block Message
- CVE-2017-11816The Microsoft Windows Graphics Device Interface (GDI) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows…Microsoft Windows Graphics Device Interface
- CVE-2017-11817The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…Microsoft Windows Kernel
- CVE-2017-11818The Microsoft Windows Storage component on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and…Microsoft Windows Storage
- CVE-2017-11819Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers…Microsoft Windows 7 SP1
- CVE-2017-11820Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site…Microsoft SharePoint Enterprise Server
- CVE-2017-11821ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current…ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2017-11822Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and…Microsoft Internet Explorer
- CVE-2017-11823The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by…Microsoft Device Guard
- CVE-2017-11824The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and…Microsoft Graphics Component
- CVE-2017-11825Microsoft Office 2016 Click-to-Run (C2R) and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform…Microsoft Office 2016, Microsoft Office 2016 for Mac
- CVE-2017-11829Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly…Microsoft Windows
- CVE-2017-8689The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…Microsoft Kernel Mode Driver
- CVE-2017-8693The Microsoft Graphics Component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information…Microsoft Graphics Component
- CVE-2017-8694The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012…Microsoft Kernel Mode Driver
- CVE-2017-8703The Microsoft Windows Subsystem for Linux on Microsoft Windows 10 1703 allows a denial of service vulnerability when it improperly handles…Microsoft Windows Subsystem for Linux
- CVE-2017-8715The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by…Microsoft Device Guard
- CVE-2017-8717The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and…Microsoft JET Database Engine
- CVE-2017-8718The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and…Microsoft JET Database Engine
- CVE-2017-8726Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…Microsoft Edge
- CVE-2017-8727Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511…Microsoft Windows Text Services Framework
- CVE-2016-5789A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions.
- CVE-2016-5791An Improper Authentication issue was discovered in JanTek JTC-200, all versions.
- CVE-2017-5789HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via…HPE LoadRunner and Performance Center
- CVE-2017-5791The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of…HPE Intelligent Management Center (IMC) PLAT