# CVEs published 2017-10-13

98 CVEs were published on October 13, 2017: 3 critical, 16 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2016-1261](https://cve.now/CVE-2016-1261.md): Junos: vulnerabilities in J-Web (CVE-2016-1261) (CVSS 7.1, Juniper Networks Junos OS)
- [CVE-2016-1265](https://cve.now/CVE-2016-1265.md): Junos Space: privilege escalation vulnerabilities in Junos Space (CVSS 9.8, Juniper Networks Junos OS)
- [CVE-2016-4921](https://cve.now/CVE-2016-4921.md): Junos: IPv6 denial of service vulnerability due to resource exhaustion (CVE-2016-4921) (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2016-4922](https://cve.now/CVE-2016-4922.md): Junos: Privilege escalation vulnerabilities in Junos CLI (CVSS 8.4, Juniper Networks Junos OS)
- [CVE-2016-4923](https://cve.now/CVE-2016-4923.md): Junos J-Web: Cross Site Scripting Vulnerability (CVSS 8.0, Juniper Networks Junos OS)
- [CVE-2016-4924](https://cve.now/CVE-2016-4924.md): vMX: Information leak vulnerability (CVSS 8.4, Juniper Networks Junos OS)
- [CVE-2016-4925](https://cve.now/CVE-2016-4925.md): JUNOSe: Line Card Reset: processor exception 0x68616c74 (halt) task: scheduler, upon receipt of crafted IPv6 packet (CVSS 7.5, Juniper Networks JunosE)
- [CVE-2017-10606](https://cve.now/CVE-2017-10606.md): SRX Series: Cryptographic weakness in SRX300 Series TPM Firmware (CVSS 4.4, Juniper Networks Junos OS)
- [CVE-2017-10607](https://cve.now/CVE-2017-10607.md): Junos: rpd core due to receipt of specially crafted BGP packet (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2017-10608](https://cve.now/CVE-2017-10608.md): SRX series: Junos OS: SRX series using IPv6 Sun/MS-RPC ALGs may experience flowd crash on processing packets. (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2017-10610](https://cve.now/CVE-2017-10610.md): SRX Series: Embedded ICMP may cause the flowd process to crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2017-10611](https://cve.now/CVE-2017-10611.md): Junos: EX Series PFE and MX MPC7E/8E/9E PFE crash when fetching interface stats with 'extended-statistics' enabled (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2017-10612](https://cve.now/CVE-2017-10612.md): Junos Space: Persistent Cross site scripting in Junos Space (CVSS 8.0, Juniper Networks Junos Space)
- [CVE-2017-10613](https://cve.now/CVE-2017-10613.md): Junos OS: A kernel hang may occur due to a specific loopback filter action command (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2017-10614](https://cve.now/CVE-2017-10614.md): Junos OS: A remote unauthenticated attacker can consume large amounts of CPU and/or memory through telnetd (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2017-10615](https://cve.now/CVE-2017-10615.md): Junos: Potential remote code execution vulnerability in PAM (CVSS 9.8, Juniper Networks Junos OS)
- [CVE-2017-10616](https://cve.now/CVE-2017-10616.md): Contrail: hard coded credentials (CVSS 5.3, Juniper Networks Contrail)
- [CVE-2017-10617](https://cve.now/CVE-2017-10617.md): Contrail: XML External Entity (XXE) vulnerability (CVSS 5.0, Juniper Networks Contrail)
- [CVE-2017-10618](https://cve.now/CVE-2017-10618.md): Junos: RPD core due to BGP UPDATE with malformed optional transitive attributes (CVSS 5.9, Juniper Networks Junos OS)
- [CVE-2017-10619](https://cve.now/CVE-2017-10619.md): Junos: SRX cluster denial of service vulnerability in flowd due to multicast packets (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2017-10620](https://cve.now/CVE-2017-10620.md): SRX Series: Antivirus updates are downloaded without verification (CVSS 7.4, Juniper Networks Junos OS)
- [CVE-2017-10621](https://cve.now/CVE-2017-10621.md): Junos OS: Denial of service vulnerability in telnetd (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2017-10622](https://cve.now/CVE-2017-10622.md): Junos Space: Authentication bypass vulnerability (CVSS 9.8, Juniper Networks Junos Space)
- [CVE-2017-10623](https://cve.now/CVE-2017-10623.md): Junos Space: Insufficient verification of cluster messages (CVSS 7.1, Juniper Networks Junos Space)
- [CVE-2017-10624](https://cve.now/CVE-2017-10624.md): Junos Space: Insufficient verification of node certificates. (CVSS 7.5, Juniper Networks Junos Space)
- [CVE-2017-6223](https://cve.now/CVE-2017-6223.md): Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command… (no CVSS, Brocade Communications Systems Zone Director Controller Fir…)
- [CVE-2017-6224](https://cve.now/CVE-2017-6224.md): Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus… (no CVSS, Brocade Communications Systems Zone Director Controller and…)
- [CVE-2017-15012](https://cve.now/CVE-2017-15012.md): OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the input of the… (no CVSS)
- [CVE-2017-15013](https://cve.now/CVE-2017-15013.md): OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an… (no CVSS)
- [CVE-2017-15014](https://cve.now/CVE-2017-15014.md): OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows… (no CVSS)
- [CVE-2017-15276](https://cve.now/CVE-2017-15276.md): OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an… (no CVSS)
- [CVE-2016-6815](https://cve.now/CVE-2016-6815.md): In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role. (no CVSS, Apache Software Foundation Apache Ranger · org.apache.range…)
- [CVE-2017-11762](https://cve.now/CVE-2017-11762.md): The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… (no CVSS, Microsoft Graphics Component)
- [CVE-2017-11763](https://cve.now/CVE-2017-11763.md): The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… (no CVSS, Microsoft Graphics Component)
- [CVE-2017-11765](https://cve.now/CVE-2017-11765.md): The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… (no CVSS, Microsoft Windows Kernel)
- [CVE-2017-11769](https://cve.now/CVE-2017-11769.md): The Microsoft Windows TRIE component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code… (no CVSS, Microsoft Windows TRIE)
- [CVE-2017-11771](https://cve.now/CVE-2017-11771.md): The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… (no CVSS, Microsoft Windows Search)
- [CVE-2017-11772](https://cve.now/CVE-2017-11772.md): The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… (no CVSS, Microsoft Windows Search)
- [CVE-2017-11774](https://cve.now/CVE-2017-11774.md): Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Micros (CVSS 7.8, KEV, Microsoft Outlook)
- [CVE-2017-11775](https://cve.now/CVE-2017-11775.md): Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site… (no CVSS, Microsoft SharePoint Enterprise Server)
- [CVE-2017-11776](https://cve.now/CVE-2017-11776.md): Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user email content, aka… (no CVSS, Microsoft Outlook)
- [CVE-2017-11777](https://cve.now/CVE-2017-11777.md): Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site… (no CVSS, Microsoft SharePoint Enterprise Server)
- [CVE-2017-11779](https://cve.now/CVE-2017-11779.md): The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10… (no CVSS, Microsoft Windows Domain Name System)
- [CVE-2017-11780](https://cve.now/CVE-2017-11780.md): The Server Message Block 1.0 (SMBv1) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold… (no CVSS, Microsoft Server Message Block)
- [CVE-2017-11781](https://cve.now/CVE-2017-11781.md): The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… (no CVSS, Microsoft Server Block Message)
- [CVE-2017-11782](https://cve.now/CVE-2017-11782.md): The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege… (no CVSS, Microsoft Server Block Message)
- [CVE-2017-11783](https://cve.now/CVE-2017-11783.md): Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an… (no CVSS, Microsoft Windows)
- [CVE-2017-11784](https://cve.now/CVE-2017-11784.md): The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… (no CVSS, Microsoft Windows Kernel)
- [CVE-2017-11785](https://cve.now/CVE-2017-11785.md): The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… (no CVSS, Microsoft Windows Kernel)
- [CVE-2017-11786](https://cve.now/CVE-2017-11786.md): Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be… (no CVSS, Microsoft Skype for Business)
- [CVE-2017-11790](https://cve.now/CVE-2017-11790.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and… (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-11792](https://cve.now/CVE-2017-11792.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user… (no CVSS, ChakraCore, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2017-11793](https://cve.now/CVE-2017-11793.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and… (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-11794](https://cve.now/CVE-2017-11794.md): Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to how… (no CVSS, Microsoft Edge)
- [CVE-2017-11796](https://cve.now/CVE-2017-11796.md): ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to… (no CVSS, ChakraCore, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2017-11797](https://cve.now/CVE-2017-11797.md): ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine… (no CVSS, Microsoft ChakraCore · Microsoft.ChakraCore)
- [CVE-2017-11798](https://cve.now/CVE-2017-11798.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the… (no CVSS, Microsoft Edge)
- [CVE-2017-11799](https://cve.now/CVE-2017-11799.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute… (no CVSS, ChakraCore, Microsoft Edge)
- [CVE-2017-11800](https://cve.now/CVE-2017-11800.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the… (no CVSS, Microsoft Edge)
- [CVE-2017-11801](https://cve.now/CVE-2017-11801.md): ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine… (no CVSS, Microsoft ChakraCore · Microsoft.ChakraCore)
- [CVE-2017-11802](https://cve.now/CVE-2017-11802.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute… (no CVSS, ChakraCore, Microsoft Edge)
- [CVE-2017-11804](https://cve.now/CVE-2017-11804.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute… (no CVSS, ChakraCore, Microsoft Edge)
- [CVE-2017-11805](https://cve.now/CVE-2017-11805.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current… (no CVSS, ChakraCore, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2017-11806](https://cve.now/CVE-2017-11806.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current… (no CVSS, ChakraCore, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2017-11807](https://cve.now/CVE-2017-11807.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current… (no CVSS, ChakraCore, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2017-11808](https://cve.now/CVE-2017-11808.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute… (no CVSS, ChakraCore, Microsoft Edge)
- [CVE-2017-11809](https://cve.now/CVE-2017-11809.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute… (no CVSS, ChakraCore, Microsoft Edge)
- [CVE-2017-11810](https://cve.now/CVE-2017-11810.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and… (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-11811](https://cve.now/CVE-2017-11811.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute… (no CVSS)
- [CVE-2017-11812](https://cve.now/CVE-2017-11812.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary… (no CVSS, ChakraCore, Microsoft Edge)
- [CVE-2017-11813](https://cve.now/CVE-2017-11813.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2… (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-11814](https://cve.now/CVE-2017-11814.md): The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… (no CVSS, Microsoft Windows Kernel)
- [CVE-2017-11815](https://cve.now/CVE-2017-11815.md): The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… (no CVSS, Microsoft Server Block Message)
- [CVE-2017-11816](https://cve.now/CVE-2017-11816.md): The Microsoft Windows Graphics Device Interface (GDI) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows… (no CVSS, Microsoft Windows Graphics Device Interface)
- [CVE-2017-11817](https://cve.now/CVE-2017-11817.md): The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… (no CVSS, Microsoft Windows Kernel)
- [CVE-2017-11818](https://cve.now/CVE-2017-11818.md): The Microsoft Windows Storage component on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and… (no CVSS, Microsoft Windows Storage)
- [CVE-2017-11819](https://cve.now/CVE-2017-11819.md): Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers… (no CVSS, Microsoft Windows 7 SP1)
- [CVE-2017-11820](https://cve.now/CVE-2017-11820.md): Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site… (no CVSS, Microsoft SharePoint Enterprise Server)
- [CVE-2017-11821](https://cve.now/CVE-2017-11821.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current… (no CVSS, ChakraCore, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2017-11822](https://cve.now/CVE-2017-11822.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and… (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-11823](https://cve.now/CVE-2017-11823.md): The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by… (no CVSS, Microsoft Device Guard)
- [CVE-2017-11824](https://cve.now/CVE-2017-11824.md): The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and… (no CVSS, Microsoft Graphics Component)
- [CVE-2017-11825](https://cve.now/CVE-2017-11825.md): Microsoft Office 2016 Click-to-Run (C2R) and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform… (no CVSS, Microsoft Office 2016, Microsoft Office 2016 for Mac)
- [CVE-2017-11826](https://cve.now/CVE-2017-11826.md): Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Wo (CVSS 7.8, KEV, Microsoft Office)
- [CVE-2017-11829](https://cve.now/CVE-2017-11829.md): Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly… (no CVSS, Microsoft Windows)
- [CVE-2017-8689](https://cve.now/CVE-2017-8689.md): The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… (no CVSS, Microsoft Kernel Mode Driver)
- [CVE-2017-8693](https://cve.now/CVE-2017-8693.md): The Microsoft Graphics Component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information… (no CVSS, Microsoft Graphics Component)
- [CVE-2017-8694](https://cve.now/CVE-2017-8694.md): The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012… (no CVSS, Microsoft Kernel Mode Driver)
- [CVE-2017-8703](https://cve.now/CVE-2017-8703.md): The Microsoft Windows Subsystem for Linux on Microsoft Windows 10 1703 allows a denial of service vulnerability when it improperly handles… (no CVSS, Microsoft Windows Subsystem for Linux)
- [CVE-2017-8715](https://cve.now/CVE-2017-8715.md): The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by… (no CVSS, Microsoft Device Guard)
- [CVE-2017-8717](https://cve.now/CVE-2017-8717.md): The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and… (no CVSS, Microsoft JET Database Engine)
- [CVE-2017-8718](https://cve.now/CVE-2017-8718.md): The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and… (no CVSS, Microsoft JET Database Engine)
- [CVE-2017-8726](https://cve.now/CVE-2017-8726.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the… (no CVSS, Microsoft Edge)
- [CVE-2017-8727](https://cve.now/CVE-2017-8727.md): Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511… (no CVSS, Microsoft Windows Text Services Framework)
- [CVE-2016-5789](https://cve.now/CVE-2016-5789.md): A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions. (no CVSS)
- [CVE-2016-5791](https://cve.now/CVE-2016-5791.md): An Improper Authentication issue was discovered in JanTek JTC-200, all versions. (no CVSS)
- [CVE-2017-5789](https://cve.now/CVE-2017-5789.md): HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via… (no CVSS, HPE LoadRunner and Performance Center)
- [CVE-2017-5791](https://cve.now/CVE-2017-5791.md): The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of… (no CVSS, HPE Intelligent Management Center (IMC) PLAT)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2017-10-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.