# CVEs published 2017-11-02 23 CVEs were published on November 2, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-11767](https://cve.now/CVE-2017-11767.md): ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine… (no CVSS, Microsoft ChakraCore · Microsoft.ChakraCore) - [CVE-2017-11508](https://cve.now/CVE-2017-11508.md): SecurityCenter versions 5.5.0, 5.5.1 and 5.5.2 contain a SQL Injection vulnerability that could be exploited by an authenticated user with… (no CVSS, Tenable SecurityCenter) - [CVE-2017-3736](https://cve.now/CVE-2017-3736.md): There is a carry propagating bug in the x86\_64 Montgomery squaring procedure in OpenSSL before 1.0.2m and 1.1.0 before 1.1.0g. (no CVSS, OpenSSL Software Foundation OpenSSL) - [CVE-2017-12243](https://cve.now/CVE-2017-12243.md): A vulnerability in the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and… (no CVSS, Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Ci…) - [CVE-2017-12261](https://cve.now/CVE-2017-12261.md): A vulnerability in the restricted shell of the Cisco Identity Services Engine (ISE) that is accessible via SSH could allow an… (no CVSS, Cisco Identity Services Engine) - [CVE-2017-12262](https://cve.now/CVE-2017-12262.md): A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM)… (no CVSS, Cisco Application Policy Infrastructure Controller Enterpri…) - [CVE-2017-12273](https://cve.now/CVE-2017-12273.md): A vulnerability in 802.11 association request frame processing for the Cisco Aironet 1560, 2800, and 3800 Series Access Points could allow… (no CVSS, Cisco Aironet 1560, 2800, and 3800 Series Access Point Plat…) - [CVE-2017-12274](https://cve.now/CVE-2017-12274.md): A vulnerability in Extensible Authentication Protocol (EAP) ingress frame processing for the Cisco Aironet 1560, 2800, and 3800 Series… (no CVSS, Cisco Aironet 1560, 2800, and 3800 Series Access Point Plat…) - [CVE-2017-12275](https://cve.now/CVE-2017-12275.md): A vulnerability in the implementation of 802.11v Basic Service Set (BSS) Transition Management functionality in Cisco Wireless LAN… (no CVSS, Cisco Wireless LAN Controller) - [CVE-2017-12276](https://cve.now/CVE-2017-12276.md): A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could… (no CVSS, Cisco Prime Collaboration Provisioning) - [CVE-2017-12277](https://cve.now/CVE-2017-12277.md): A vulnerability in the Smart Licensing Manager service of the Cisco Firepower 4100 Series Next-Generation Firewall (NGFW) and Firepower… (no CVSS, Cisco Firepower 4100 Series NGFW and Firepower 9300 Securit…) - [CVE-2017-12278](https://cve.now/CVE-2017-12278.md): A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Wireless LAN Controllers could allow an authenticated… (no CVSS, Cisco Wireless LAN Controller) - [CVE-2017-12279](https://cve.now/CVE-2017-12279.md): A vulnerability in the packet processing code of Cisco IOS Software for Cisco Aironet Access Points could allow an unauthenticated… (no CVSS, Cisco IOS Software for Cisco Aironet Access Points) - [CVE-2017-12280](https://cve.now/CVE-2017-12280.md): A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) Discovery Request parsing functionality of Cisco… (no CVSS, Cisco Wireless LAN Controller) - [CVE-2017-12281](https://cve.now/CVE-2017-12281.md): A vulnerability in the implementation of Protected Extensible Authentication Protocol (PEAP) functionality for standalone configurations… (no CVSS, Cisco Aironet 1800, 2800, and 3800 Series Access Points) - [CVE-2017-12282](https://cve.now/CVE-2017-12282.md): A vulnerability in the Access Network Query Protocol (ANQP) ingress frame processing functionality of Cisco Wireless LAN Controllers could… (no CVSS, Cisco Wireless LAN Controller) - [CVE-2017-12283](https://cve.now/CVE-2017-12283.md): A vulnerability in the handling of 802.11w Protected Management Frames (PAF) by Cisco Aironet 3800 Series Access Points could allow an… (no CVSS, Cisco Aironet 3800 Series Access Points) - [CVE-2017-12294](https://cve.now/CVE-2017-12294.md): A vulnerability in Cisco WebEx Meetings Server could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS)… (no CVSS, Cisco WebEx Meetings Server) - [CVE-2017-12295](https://cve.now/CVE-2017-12295.md): A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to access sensitive data about the… (no CVSS, Cisco WebEx Meetings Server) - [CVE-2017-16510](https://cve.now/CVE-2017-16510.md): WordPress before 4.8.3 is affected by an issue where $wpdb-\>prepare() can create unexpected and unsafe queries leading to potential SQL… (no CVSS) - [CVE-2017-10825](https://cve.now/CVE-2017-10825.md): Untrusted search path vulnerability in Installer of Flets Easy Setup Tool Ver1.2.0 and earlier allows an attacker to gain privileges via a… (no CVSS, NIPPON TELEGRAPH AND TELEPHONE WEST Installer of Flets Easy…) - [CVE-2017-10870](https://cve.now/CVE-2017-10870.md): Memory corruption vulnerability in Rakuraku Hagaki (Rakuraku Hagaki 2018, Rakuraku Hagaki 2017, Rakuraku Hagaki 2016) and Rakuraku Hagaki… (no CVSS, Justsystem Rakuraku Hagaki) - [CVE-2017-10873](https://cve.now/CVE-2017-10873.md): OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. (no CVSS, Open Source Solution Technology OpenAM) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2017-11-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.