CVEs published November 23, 2017
7 CVEs were published on November 23, 2017: 0 critical, 1 high. Browse them by severity, product and exploitation status.
- Published
- 7
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 6
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- krb5
- 1
- nokogiri
- 1
High 1
Medium, low and unrated 6
- CVE-2017-13698An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices.
- CVE-2017-13699An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices.
- CVE-2017-13701An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices.
- CVE-2017-16931parser.c in libxml2 before 2.9.5 mishandles parameter-entity references because the NEXTL macro calls the xmlParserHandlePEReference functio
- CVE-2017-15088plugins/preauth/pkinit/pkinit_crypto_openssl.c in MIT Kerberos 5 (aka krb5) through 1.15.2 mishandles Distinguished Name (DN) fields…krb5
- CVE-2017-16927The scp_v0s_accept function in sesman/libscp/libscp_v0.c in the session manager in xrdp through 0.9.4 uses an untrusted integer as a write…