CVEs published November 2, 2017
23 CVEs were published on November 2, 2017: 0 critical, 0 high. Browse them by severity, product and exploitation status.
- Published
- 23
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 23
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Cisco Wireless LAN Controller
- 4
- Cisco Aironet 1560, 2800, and 3800 Series Access Point Plat…
- 2
- Cisco WebEx Meetings Server
- 2
- Cisco Aironet 1800, 2800, and 3800 Series Access Points
- 1
- Cisco Aironet 3800 Series Access Points
- 1
- Cisco Application Policy Infrastructure Controller Enterpri…
- 1
- Cisco Firepower 4100 Series NGFW and Firepower 9300 Securit…
- 1
- Cisco Identity Services Engine
- 1
- Cisco IOS Software for Cisco Aironet Access Points
- 1
- Cisco Prime Collaboration Provisioning
- 1
Medium, low and unrated 23
- CVE-2017-11767ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine…Microsoft ChakraCore · Microsoft.ChakraCore
- CVE-2017-11508SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with…Tenable SecurityCenter
- CVE-2017-3736There is a carry propagating bug in the x86_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g.OpenSSL Software Foundation OpenSSL
- CVE-2017-12243A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and…Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Ci…
- CVE-2017-12261A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that is accessible via SSH could allow an…Cisco Identity Services Engine
- CVE-2017-12262A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM)…Cisco Application Policy Infrastructure Controller Enterpri…
- CVE-2017-12273A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow…Cisco Aironet 1560, 2800, and 3800 Series Access Point Plat…
- CVE-2017-12274A vulnerability in Extensible Authentication Protocol (EAP) ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series…Cisco Aironet 1560, 2800, and 3800 Series Access Point Plat…
- CVE-2017-12275A vulnerability in the implementation of 802.11v Basic Service Set (BSS) Transition Management functionality in Cisco Wireless LAN…Cisco Wireless LAN Controller
- CVE-2017-12276A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could…Cisco Prime Collaboration Provisioning
- CVE-2017-12277A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower…Cisco Firepower 4100 Series NGFW and Firepower 9300 Securit…
- CVE-2017-12278A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Wireless LAN Controllers could allow an authenticated…Cisco Wireless LAN Controller
- CVE-2017-12279A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unauthenticated…Cisco IOS Software for Cisco Aironet Access Points
- CVE-2017-12280A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) Discovery Request parsing functionality of Cisco…Cisco Wireless LAN Controller
- CVE-2017-12281A vulnerability in the implementation of Protected Extensible Authentication Protocol (PEAP) functionality for standalone configurations…Cisco Aironet 1800, 2800, and 3800 Series Access Points
- CVE-2017-12282A vulnerability in the Access Network Query Protocol (ANQP) ingress frame processing functionality of Cisco Wireless LAN Controllers could…Cisco Wireless LAN Controller
- CVE-2017-12283A vulnerability in the handling of 802.11w Protected Management Frames (PAF) by Cisco Aironet 3800 Series Access Points could allow an…Cisco Aironet 3800 Series Access Points
- CVE-2017-12294A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)…Cisco WebEx Meetings Server
- CVE-2017-12295A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the…Cisco WebEx Meetings Server
- CVE-2017-16510WordPress before 4.8.3 is affected by an issue where $wpdb->prepare() can create unexpected and unsafe queries leading to potential SQL…
- CVE-2017-10825Untrusted search path vulnerability in Installer of Flets Easy Setup Tool Ver1.2.0 and earlier allows an attacker to gain privileges via a…NIPPON TELEGRAPH AND TELEPHONE WEST Installer of Flets Easy…
- CVE-2017-10870Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) and Rakuraku Hagaki…Justsystem Rakuraku Hagaki
- CVE-2017-10873OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors.Open Source Solution Technology OpenAM