# CVEs published 2017-04-07

87 CVEs were published on April 7, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-0454](https://cve.now/CVE-2017-0454.md): An elevation of privilege vulnerability in the Qualcomm audio driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0462](https://cve.now/CVE-2017-0462.md): An elevation of privilege vulnerability in the Qualcomm Seemp driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0538](https://cve.now/CVE-2017-0538.md): A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corru (no CVSS, Google Android)
- [CVE-2017-0539](https://cve.now/CVE-2017-0539.md): A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corr (no CVSS, Google Android)
- [CVE-2017-0540](https://cve.now/CVE-2017-0540.md): A remote code execution vulnerability in libhevc in Mediaserver could enable an attacker using a specially crafted file to cause memory corr (no CVSS, Google Android)
- [CVE-2017-0541](https://cve.now/CVE-2017-0541.md): A remote code execution vulnerability in sonivox in Mediaserver could enable an attacker using a specially crafted file to cause memory corr (no CVSS, Google Android)
- [CVE-2017-0542](https://cve.now/CVE-2017-0542.md): A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corru (no CVSS, Google Android)
- [CVE-2017-0543](https://cve.now/CVE-2017-0543.md): A remote code execution vulnerability in libavc in Mediaserver could enable an attacker using a specially crafted file to cause memory corru (no CVSS, Google Android)
- [CVE-2017-0544](https://cve.now/CVE-2017-0544.md): An elevation of privilege vulnerability in CameraBase could enable a local malicious application to execute arbitrary code. (no CVSS, Google Android)
- [CVE-2017-0545](https://cve.now/CVE-2017-0545.md): An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the conte (no CVSS, Google Android)
- [CVE-2017-0546](https://cve.now/CVE-2017-0546.md): An elevation of privilege vulnerability in SurfaceFlinger could enable a local malicious application to execute arbitrary code within the co (no CVSS, Google Android)
- [CVE-2017-0547](https://cve.now/CVE-2017-0547.md): An information disclosure vulnerability in libmedia in Mediaserver could enable a local malicious application to access data outside of its (no CVSS, Google Android)
- [CVE-2017-0548](https://cve.now/CVE-2017-0548.md): A remote denial of service vulnerability in libskia could enable an attacker to use a specially crafted file to cause a device hang or reboo (no CVSS, Google Android)
- [CVE-2017-0549](https://cve.now/CVE-2017-0549.md): A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device (no CVSS, Google Android)
- [CVE-2017-0550](https://cve.now/CVE-2017-0550.md): A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device (no CVSS, Google Android)
- [CVE-2017-0551](https://cve.now/CVE-2017-0551.md): A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device (no CVSS, Android Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1)
- [CVE-2017-0552](https://cve.now/CVE-2017-0552.md): A remote denial of service vulnerability in libavc in Mediaserver could enable an attacker to use a specially crafted file to cause a device (no CVSS, Google Android)
- [CVE-2017-0553](https://cve.now/CVE-2017-0553.md): An elevation of privilege vulnerability in libnl could enable a local malicious application to execute arbitrary code within the context of (no CVSS, Google Android)
- [CVE-2017-0554](https://cve.now/CVE-2017-0554.md): An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside (no CVSS, Google Android)
- [CVE-2017-0555](https://cve.now/CVE-2017-0555.md): An information disclosure vulnerability in libavc in Mediaserver could enable a local malicious application to access data outside of its pe (no CVSS, Google Android)
- [CVE-2017-0556](https://cve.now/CVE-2017-0556.md): An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its (no CVSS, Google Android)
- [CVE-2017-0557](https://cve.now/CVE-2017-0557.md): An information disclosure vulnerability in libmpeg2 in Mediaserver could enable a local malicious application to access data outside of its (no CVSS, Google Android)
- [CVE-2017-0558](https://cve.now/CVE-2017-0558.md): An information disclosure vulnerability in Mediaserver could enable a local malicious application to access data outside of its permission l (no CVSS, Google Android)
- [CVE-2017-0559](https://cve.now/CVE-2017-0559.md): An information disclosure vulnerability in libskia could enable a local malicious application to access data outside of its permission level (no CVSS, Google Android)
- [CVE-2017-0560](https://cve.now/CVE-2017-0560.md): An information disclosure vulnerability in the factory reset process could enable a local malicious attacker to access data from the previou (no CVSS, Google Android)
- [CVE-2017-0561](https://cve.now/CVE-2017-0561.md): A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary code within the con (no CVSS, Google Android)
- [CVE-2017-0562](https://cve.now/CVE-2017-0562.md): An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary c (no CVSS, Google Android)
- [CVE-2017-0563](https://cve.now/CVE-2017-0563.md): An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code w (no CVSS, Google Android)
- [CVE-2017-0564](https://cve.now/CVE-2017-0564.md): An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code wit (no CVSS, Android Kernel-3.10 Kernel-3.18)
- [CVE-2017-0565](https://cve.now/CVE-2017-0565.md): An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code (no CVSS, Google Android)
- [CVE-2017-0566](https://cve.now/CVE-2017-0566.md): An elevation of privilege vulnerability in the MediaTek camera driver could enable a local malicious application to execute arbitrary code w (no CVSS, Google Android)
- [CVE-2017-0567](https://cve.now/CVE-2017-0567.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0568](https://cve.now/CVE-2017-0568.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0569](https://cve.now/CVE-2017-0569.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0570](https://cve.now/CVE-2017-0570.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0571](https://cve.now/CVE-2017-0571.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0572](https://cve.now/CVE-2017-0572.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0573](https://cve.now/CVE-2017-0573.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0574](https://cve.now/CVE-2017-0574.md): An elevation of privilege vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0575](https://cve.now/CVE-2017-0575.md): An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0576](https://cve.now/CVE-2017-0576.md): An elevation of privilege vulnerability in the Qualcomm crypto engine driver could enable a local malicious application to execute arbitrary (no CVSS, Google Android)
- [CVE-2017-0577](https://cve.now/CVE-2017-0577.md): An elevation of privilege vulnerability in the HTC touchscreen driver could enable a local malicious application to execute arbitrary code w (no CVSS, Google Android)
- [CVE-2017-0578](https://cve.now/CVE-2017-0578.md): An elevation of privilege vulnerability in the DTS sound driver could enable a local malicious application to execute arbitrary code within (no CVSS, Google Android)
- [CVE-2017-0579](https://cve.now/CVE-2017-0579.md): An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code wi (no CVSS, Google Android)
- [CVE-2017-0580](https://cve.now/CVE-2017-0580.md): An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary (no CVSS, Google Android)
- [CVE-2017-0581](https://cve.now/CVE-2017-0581.md): An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary (no CVSS, Google Android)
- [CVE-2017-0582](https://cve.now/CVE-2017-0582.md): An elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local malicious application to execute arbitrary code (no CVSS, Google Android)
- [CVE-2017-0583](https://cve.now/CVE-2017-0583.md): An elevation of privilege vulnerability in the Qualcomm CP access driver could enable a local malicious application to execute arbitrary cod (no CVSS, Google Android)
- [CVE-2017-0584](https://cve.now/CVE-2017-0584.md): An information disclosure vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to access data outside of it (no CVSS, Google Android)
- [CVE-2017-0585](https://cve.now/CVE-2017-0585.md): An information disclosure vulnerability in the Broadcom Wi-Fi driver could enable a local malicious application to access data outside of it (no CVSS, Google Android)
- [CVE-2017-0586](https://cve.now/CVE-2017-0586.md): An information disclosure vulnerability in the Qualcomm sound driver could enable a local malicious application to access data outside of it (no CVSS, Google Android)
- [CVE-2017-6019](https://cve.now/CVE-2017-6019.md): An issue was discovered in Schneider Electric Conext ComBox, model 865-1058, all firmware versions prior to V3.03 BN 830. (no CVSS, Schneider Electric Conext ComBox)
- [CVE-2017-6033](https://cve.now/CVE-2017-6033.md): A DLL Hijacking issue was discovered in Schneider Electric Interactive Graphical SCADA System (IGSS) Software, Version 12 and previous versi (no CVSS, Schneider Electric Interactive Graphical SCADA System Softw…)
- [CVE-2007-6759](https://cve.now/CVE-2007-6759.md): Dataprobe iBootBar (with 2007-09-20 and possibly later released firmware) allows remote attackers to bypass authentication, and conduct powe (no CVSS)
- [CVE-2007-6760](https://cve.now/CVE-2007-6760.md): Dataprobe iBootBar (with 2007-09-20 and possibly later beta firmware) allows remote attackers to bypass authentication, and conduct power-cy (no CVSS)
- [CVE-2016-7786](https://cve.now/CVE-2016-7786.md): Sophos Cyberoam UTM CR25iNG 10.6.3 MR-5 allows remote authenticated users to bypass intended access restrictions via direct object reference (no CVSS)
- [CVE-2017-7584](https://cve.now/CVE-2017-7584.md): Memory Corruption Vulnerability in Foxit PDF Toolkit before 2.1 allows an attacker to cause Denial of Service & Remote Code Execution when a (no CVSS)
- [CVE-2017-7585](https://cve.now/CVE-2017-7585.md): In libsndfile before 1.0.28, an error in the "flac\_buffer\_copy()" function (flac.c) can be exploited to cause a stack-based buffer overflow (no CVSS)
- [CVE-2017-7586](https://cve.now/CVE-2017-7586.md): In libsndfile before 1.0.28, an error in the "header\_read()" function (common.c) when handling ID3 tags can be exploited to cause a stack-ba (no CVSS)
- [CVE-2016-6805](https://cve.now/CVE-2016-6805.md): Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier documents. (no CVSS, org.apache.ignite:ignite-core)
- [CVE-2017-7581](https://cve.now/CVE-2017-7581.md): SQL injection vulnerability in NewsController.php in the News module 5.3.2 and earlier for TYPO3 allows unauthenticated users to execute arb (no CVSS)
- [CVE-2017-7583](https://cve.now/CVE-2017-7583.md): ILIAS before 5.2.3 has XSS via SVG documents. (no CVSS)
- [CVE-2016-9195](https://cve.now/CVE-2016-9195.md): A vulnerability in RADIUS Change of Authorization (CoA) request processing in the Cisco Wireless LAN Controller (WLC) could allow an unauthe (no CVSS, Cisco Wireless LAN Controller)
- [CVE-2016-9196](https://cve.now/CVE-2016-9196.md): A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authen (no CVSS, Cisco Aironet 1800, 2800, and 3800 Series Access Point Plat…)
- [CVE-2016-9197](https://cve.now/CVE-2016-9197.md): A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authent (no CVSS, Cisco Mobility Express 2800 and 3800 Series Wireless LAN Co…)
- [CVE-2017-3817](https://cve.now/CVE-2017-3817.md): A vulnerability in the role-based resource checking functionality of Cisco Unified Computing System (UCS) Director could allow an authentica (no CVSS, Cisco UCS Director)
- [CVE-2017-3848](https://cve.now/CVE-2017-3848.md): A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to (no CVSS, Cisco Prime Infrastructure)
- [CVE-2017-3884](https://cve.now/CVE-2017-3884.md): A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authe (no CVSS, Cisco Prime Infrastructure and Cisco Evolved Programmable N…)
- [CVE-2017-3885](https://cve.now/CVE-2017-3885.md): A vulnerability in the detection engine reassembly of Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an (no CVSS, Cisco Firepower Detection Engine)
- [CVE-2017-3886](https://cve.now/CVE-2017-3886.md): A vulnerability in the Cisco Unified Communications Manager web interface could allow an authenticated, remote attacker to impact the confid (no CVSS, Cisco Unified Communications Manager)
- [CVE-2017-3887](https://cve.now/CVE-2017-3887.md): A vulnerability in the detection engine that handles Secure Sockets Layer (SSL) packets for Cisco Firepower System Software could allow an u (no CVSS, Cisco Firepower Detection Engine)
- [CVE-2017-3888](https://cve.now/CVE-2017-3888.md): A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker (no CVSS, Cisco Unified Communications Manager)
- [CVE-2017-3889](https://cve.now/CVE-2017-3889.md): A vulnerability in the web interface of the Cisco Registered Envelope Service could allow an unauthenticated, remote attacker to redirect a (no CVSS, Cisco Registered Envelope Service)
- [CVE-2017-6597](https://cve.now/CVE-2017-6597.md): A vulnerability in the local-mgmt CLI command of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generati (no CVSS, Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Ci…)
- [CVE-2017-6598](https://cve.now/CVE-2017-6598.md): A vulnerability in the debug plug-in functionality of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Gen (no CVSS, Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Ci…)
- [CVE-2017-6599](https://cve.now/CVE-2017-6599.md): A vulnerability in Google-defined remote procedure call (gRPC) handling in Cisco IOS XR Software could allow an unauthenticated, remote atta (no CVSS, Cisco IOS XR Software)
- [CVE-2017-6600](https://cve.now/CVE-2017-6600.md): A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), (no CVSS, Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Ci…)
- [CVE-2017-6601](https://cve.now/CVE-2017-6601.md): A vulnerability in the CLI of the Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), (no CVSS, Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Ci…)
- [CVE-2017-6602](https://cve.now/CVE-2017-6602.md): A vulnerability in the CLI of Cisco Unified Computing System (UCS) Manager, Cisco Firepower 4100 Series Next-Generation Firewall (NGFW), and (no CVSS, Cisco UCS Manager, Cisco Firepower 4100 Series NGFW, and Ci…)
- [CVE-2017-6603](https://cve.now/CVE-2017-6603.md): A vulnerability in Cisco ASR 903 or ASR 920 Series Devices running with an RSP2 card could allow an unauthenticated, adjacent attacker to ca (no CVSS, Cisco ASR 903 and ASR 920 Series Devices)
- [CVE-2017-6604](https://cve.now/CVE-2017-6604.md): A vulnerability in the web interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacke (no CVSS, Cisco Integrated Management Controller)
- [CVE-2017-6606](https://cve.now/CVE-2017-6606.md): A vulnerability in a startup script of Cisco IOS XE Software could allow an unauthenticated attacker with physical access to the targeted sy (no CVSS, Cisco IOS XE)
- [CVE-2017-7579](https://cve.now/CVE-2017-7579.md): inc/PMF/Faq.php in phpMyFAQ before 2.9.7 has XSS in the question field. (no CVSS)
- [CVE-2017-2387](https://cve.now/CVE-2017-2387.md): The Apple Music (aka com.apple.android.music) application before 2.0 for Android does not verify X.509 certificates from SSL servers, which (no CVSS, Apple Music before 2.0 for Android)
- [CVE-2017-7570](https://cve.now/CVE-2017-7570.md): PivotX 2.3.11 allows remote authenticated Advanced users to execute arbitrary PHP code by performing an upload with a safe file extension (s (no CVSS)
- [CVE-2017-7577](https://cve.now/CVE-2017-7577.md): XiongMai uc-httpd has directory traversal allowing the reading of arbitrary files via a "GET ../" HTTP request. (no CVSS)
- [CVE-2017-7578](https://cve.now/CVE-2017-7578.md): Multiple heap-based buffer overflows in parser.c in libming 0.4.7 allow remote attackers to cause a denial of service (listswf application c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-04-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.