# CVEs published 2017-04-05

34 CVEs were published on April 5, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-7448](https://cve.now/CVE-2017-7448.md): The allocate\_channel\_framebuffer function in uncompressed\_components.hh in Dropbox Lepton 1.2.1 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2017-7450](https://cve.now/CVE-2017-7450.md): AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface. (no CVSS)
- [CVE-2017-7446](https://cve.now/CVE-2017-7446.md): HelpDEZk 1.1.1 has CSRF in admin/home#/person/ with an impact of obtaining admin privileges. (no CVSS)
- [CVE-2017-7447](https://cve.now/CVE-2017-7447.md): HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact of remote execution of arbitrary PHP code. (no CVSS)
- [CVE-2015-9019](https://cve.now/CVE-2015-9019.md): In libxslt 1.1.29 and earlier, the EXSLT math.random function was not initialized with a random seed during startup, which could cause usage (no CVSS)
- [CVE-2017-0883](https://cve.now/CVE-2017-0883.md): Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. (no CVSS, Nextcloud Server)
- [CVE-2017-0884](https://cve.now/CVE-2017-0884.md): Nextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders despite lacking permissions issue. (no CVSS, Nextcloud Server)
- [CVE-2017-0885](https://cve.now/CVE-2017-0885.md): Nextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of file in write-only share. (no CVSS, Nextcloud Server)
- [CVE-2017-0886](https://cve.now/CVE-2017-0886.md): Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. (no CVSS, Nextcloud Server)
- [CVE-2017-0887](https://cve.now/CVE-2017-0887.md): Nextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. (no CVSS, Nextcloud Server)
- [CVE-2017-0888](https://cve.now/CVE-2017-0888.md): Nextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the "files" app. (no CVSS, Nextcloud Server)
- [CVE-2017-7443](https://cve.now/CVE-2017-7443.md): apt-cacher before 1.7.15 and apt-cacher-ng before 3.4 allow HTTP response splitting via encoded newline characters, related to lack of block (no CVSS)
- [CVE-2017-7444](https://cve.now/CVE-2017-7444.md): In Veritas System Recovery before 16 SP1, there is a DLL hijacking vulnerability in the patch installer if an attacker has write access to t (no CVSS)
- [CVE-2016-3015](https://cve.now/CVE-2016-3015.md): IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. (no CVSS, IBM Cognos Analytics)
- [CVE-2016-3031](https://cve.now/CVE-2016-3031.md): IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. (no CVSS, IBM Cognos Analytics)
- [CVE-2016-6100](https://cve.now/CVE-2016-6100.md): IBM Disposal and Governance Management for IT and IBM Global Retention Policy and Schedule Management, components of IBM Atlas Policy Suite (no CVSS, IBM Atlas Policy Suite)
- [CVE-2017-1180](https://cve.now/CVE-2017-1180.md): The IBM TRIRIGA Document Manager contains a vulnerability that could allow an authenticated user to execute actions they did not have access (no CVSS, IBM TRIRIGA Application Platform)
- [CVE-2014-9829](https://cve.now/CVE-2014-9829.md): coders/sun.c in ImageMagick allows remote attackers to cause a denial of service (out-of-bounds access) via a crafted sun file. (no CVSS)
- [CVE-2015-4680](https://cve.now/CVE-2015-4680.md): FreeRADIUS 2.2.x before 2.2.8 and 3.0.x before 3.0.9 does not properly check revocation of intermediate CA certificates. (no CVSS)
- [CVE-2017-6338](https://cve.now/CVE-2017-6338.md): Multiple Access Control issues in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 allow an authenticated, re (no CVSS)
- [CVE-2017-6339](https://cve.now/CVE-2017-6339.md): Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 mismanages certain key and certificate data. (no CVSS)
- [CVE-2017-6340](https://cve.now/CVE-2017-6340.md): Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 does not sanitize a rest/commonlog/report/template name fiel (no CVSS)
- [CVE-2016-9091](https://cve.now/CVE-2016-9091.md): Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS com (no CVSS, Symantec Blue Coat ASG · Symantec Blue Coat CAS)
- [CVE-2017-0325](https://cve.now/CVE-2017-0325.md): An elevation of privilege vulnerability in the NVIDIA I2C HID driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Nvidia Android)
- [CVE-2017-0327](https://cve.now/CVE-2017-0327.md): An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code wit (no CVSS, Nvidia Android)
- [CVE-2017-0328](https://cve.now/CVE-2017-0328.md): An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its (no CVSS, Nvidia Android)
- [CVE-2017-0329](https://cve.now/CVE-2017-0329.md): An elevation of privilege vulnerability in the NVIDIA boot and power management processor driver could enable a local malicious application (no CVSS, Nvidia Android)
- [CVE-2017-0330](https://cve.now/CVE-2017-0330.md): An information disclosure vulnerability in the NVIDIA crypto driver could enable a local malicious application to access data outside of its (no CVSS, Nvidia Android)
- [CVE-2017-0332](https://cve.now/CVE-2017-0332.md): An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code wit (no CVSS, Nvidia Android)
- [CVE-2017-0339](https://cve.now/CVE-2017-0339.md): An elevation of privilege vulnerability in the NVIDIA crypto driver could enable a local malicious application to execute arbitrary code wit (no CVSS, Nvidia Android)
- [CVE-2017-6956](https://cve.now/CVE-2017-6956.md): On the Broadcom Wi-Fi HardMAC SoC with fbt firmware, a stack buffer overflow occurs when handling an 802.11r (FT) authentication response, l (no CVSS)
- [CVE-2017-6975](https://cve.now/CVE-2017-6975.md): Wi-Fi in Apple iOS before 10.3.1 does not prevent CVE-2017-6956 stack buffer overflow exploitation via a crafted access point. (no CVSS)
- [CVE-2017-2671](https://cve.now/CVE-2017-2671.md): The ping\_unhash function in net/ipv4/ping.c in the Linux kernel through 4.10.8 is too late in obtaining a certain lock and consequently cann (no CVSS)
- [CVE-2017-7358](https://cve.now/CVE-2017-7358.md): In LightDM through 1.22.0, a directory traversal issue in debian/guest-account.sh allows local attackers to own arbitrary directory path loc (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-04-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.