# CVEs published 2017-04-12

154 CVEs were published on April 12, 2017: 0 critical, 5 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2017-7700](https://cve.now/CVE-2017-7700.md): In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture (no CVSS)
- [CVE-2017-7701](https://cve.now/CVE-2017-7701.md): In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the BGP dissector could go into an infinite loop, triggered by packet injection or a malfor (no CVSS)
- [CVE-2017-7702](https://cve.now/CVE-2017-7702.md): In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WBXML dissector could go into an infinite loop, triggered by packet injection or a malf (no CVSS)
- [CVE-2017-7703](https://cve.now/CVE-2017-7703.md): In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the IMAP dissector could crash, triggered by packet injection or a malformed capture file. (no CVSS)
- [CVE-2017-7704](https://cve.now/CVE-2017-7704.md): In Wireshark 2.2.0 to 2.2.5, the DOF dissector could go into an infinite loop, triggered by packet injection or a malformed capture file. (no CVSS)
- [CVE-2017-7705](https://cve.now/CVE-2017-7705.md): In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the RPC over RDMA dissector could go into an infinite loop, triggered by packet injection o (no CVSS)
- [CVE-2017-7745](https://cve.now/CVE-2017-7745.md): In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SIGCOMP dissector could go into an infinite loop, triggered by packet injection or a ma (no CVSS)
- [CVE-2017-7746](https://cve.now/CVE-2017-7746.md): In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the SLSK dissector could go into an infinite loop, triggered by packet injection or a malfo (no CVSS)
- [CVE-2017-7747](https://cve.now/CVE-2017-7747.md): In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the PacketBB dissector could crash, triggered by packet injection or a malformed capture fi (no CVSS)
- [CVE-2017-7748](https://cve.now/CVE-2017-7748.md): In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the WSP dissector could go into an infinite loop, triggered by packet injection or a malfor (no CVSS)
- [CVE-2015-7562](https://cve.now/CVE-2015-7562.md): Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or (no CVSS, nilsteampassnet/teampass)
- [CVE-2015-7563](https://cve.now/CVE-2015-7563.md): Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the authentication of an au (no CVSS)
- [CVE-2015-7564](https://cve.now/CVE-2015-7564.md): Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) i (no CVSS, nilsteampassnet/teampass)
- [CVE-2016-1178](https://cve.now/CVE-2016-1178.md): The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify s (no CVSS)
- [CVE-2016-1179](https://cve.now/CVE-2016-1179.md): Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier al (no CVSS)
- [CVE-2016-2803](https://cve.now/CVE-2016-2803.md): Cross-site scripting (XSS) vulnerability in the dependency graphs in Bugzilla 2.16rc1 through 4.4.11, and 4.5.1 through 5.0.2 allows remote (no CVSS)
- [CVE-2016-4337](https://cve.now/CVE-2016-4337.md): SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2016-4891](https://cve.now/CVE-2016-4891.md): Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an admini (no CVSS)
- [CVE-2016-4892](https://cve.now/CVE-2016-4892.md): Cross-site scripting vulnerability in SetsucoCMS all versions allows remote attackers to inject arbitrary web script or HTML via unspecified (no CVSS)
- [CVE-2016-4893](https://cve.now/CVE-2016-4893.md): SQL injection vulnerability in the SetsucoCMS all versions allows remote authenticated attackers to execute arbitrary SQL commands via unspe (no CVSS)
- [CVE-2016-4894](https://cve.now/CVE-2016-4894.md): SetsucoCMS all versions allows remote attackers to cause a denial of service via unspecified vectors. (no CVSS)
- [CVE-2016-4895](https://cve.now/CVE-2016-4895.md): SetsucoCMS all versions allows remote authenticated attackers to conduct code injection attacks via unspecified vectors. (no CVSS)
- [CVE-2016-4896](https://cve.now/CVE-2016-4896.md): SetsucoCMS all versions does not properly manage sessions, which allows remote attackers to disclose or alter unauthorized information via u (no CVSS)
- [CVE-2016-4897](https://cve.now/CVE-2016-4897.md): Multiple cross-site scripting (XSS) vulnerabilities in (1) filter/save\_forward.cgi, (2) filter/save.cgi, (3) /man/search.cgi in Usermin befo (no CVSS)
- [CVE-2016-5313](https://cve.now/CVE-2016-5313.md): Symantec Web Gateway (SWG) before 5.2.5 allows remote authenticated users to execute arbitrary OS commands. (no CVSS)
- [CVE-2016-5856](https://cve.now/CVE-2016-5856.md): Drivers/soc/qcom/spcom.c in the Qualcomm SPCom driver in the Android kernel 2017-03-05 allows local users to gain privileges, a different vu (no CVSS)
- [CVE-2016-6348](https://cve.now/CVE-2016-6348.md): JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack. (no CVSS, org.jboss.resteasy:resteasy-client)
- [CVE-2017-5936](https://cve.now/CVE-2017-5936.md): OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allo (no CVSS, nova-lxd)
- [CVE-2017-7279](https://cve.now/CVE-2017-7279.md): An unprivileged user of the Unitrends Enterprise Backup before 9.0.0 web server can escalate to root privileges by modifying the "token" coo (no CVSS)
- [CVE-2017-7280](https://cve.now/CVE-2017-7280.md): An issue was discovered in api/includes/systems.php in Unitrends Enterprise Backup before 9.0.0. (no CVSS)
- [CVE-2017-7281](https://cve.now/CVE-2017-7281.md): An issue was discovered in Unitrends Enterprise Backup before 9.1.2. (no CVSS)
- [CVE-2017-7284](https://cve.now/CVE-2017-7284.md): An attacker that has hijacked a Unitrends Enterprise Backup (before 9.1.2) web server session can leverage api/includes/users.php to change (no CVSS)
- [CVE-2016-4459](https://cve.now/CVE-2016-4459.md): Stack-based buffer overflow in native/mod\_manager/node.c in mod\_cluster 1.2.9. (no CVSS)
- [CVE-2016-6808](https://cve.now/CVE-2016-6808.md): Buffer overflow in Apache Tomcat Connectors (mod\_jk) before 1.2.42. (no CVSS)
- [CVE-2016-9957](https://cve.now/CVE-2016-9957.md): Stack-based buffer overflow in game-music-emu before 0.6.1. (no CVSS)
- [CVE-2016-9958](https://cve.now/CVE-2016-9958.md): game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations. (no CVSS)
- [CVE-2016-9959](https://cve.now/CVE-2016-9959.md): game-music-emu before 0.6.1 allows remote attackers to generate out of bounds 8-bit values. (no CVSS)
- [CVE-2017-6059](https://cve.now/CVE-2017-6059.md): Mod\_auth\_openidc.c in the Ping Identity OpenID Connect authentication module for Apache (aka mod\_auth\_openidc) before 2.14 allows remote att (no CVSS)
- [CVE-2016-8716](https://cve.now/CVE-2016-8716.md): An exploitable Cleartext Transmission of Password vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Acces (CVSS 7.5, Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireles…)
- [CVE-2016-8718](https://cve.now/CVE-2016-8718.md): An exploitable Cross-Site Request Forgery vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Point (CVSS 7.5, Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireles…)
- [CVE-2016-8719](https://cve.now/CVE-2016-8719.md): An exploitable reflected Cross-Site Scripting vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless Access Po (CVSS 7.5, Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireles…)
- [CVE-2017-7741](https://cve.now/CVE-2017-7741.md): In libsndfile before 1.0.28, an error in the "flac\_buffer\_copy()" function (flac.c) can be exploited to cause a segmentation violation (with (no CVSS)
- [CVE-2017-7742](https://cve.now/CVE-2017-7742.md): In libsndfile before 1.0.28, an error in the "flac\_buffer\_copy()" function (flac.c) can be exploited to cause a segmentation violation (with (no CVSS)
- [CVE-2017-7722](https://cve.now/CVE-2017-7722.md): In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and (no CVSS)
- [CVE-2017-3125](https://cve.now/CVE-2017-3125.md): An unauthenticated XSS vulnerability with FortiMail 5.0.0 - 5.2.9 and 5.3.0 - 5.3.8 could allow an attacker to execute arbitrary scripts in (no CVSS, Fortinet FortiMail)
- [CVE-2017-7716](https://cve.now/CVE-2017-7716.md): The read\_u32\_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer (no CVSS)
- [CVE-2017-7719](https://cve.now/CVE-2017-7719.md): SQL injection in the Spider Event Calendar (aka spider-event-calendar) plugin before 1.5.52 for WordPress is exploitable with the order\_by p (no CVSS)
- [CVE-2017-0058](https://cve.now/CVE-2017-0058.md): A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information. (no CVSS, Microsoft Windows)
- [CVE-2017-0093](https://cve.now/CVE-2017-0093.md): A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory (no CVSS, Microsoft Edge)
- [CVE-2017-0106](https://cve.now/CVE-2017-0106.md): Microsoft Excel 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to execu (no CVSS, Microsoft Office)
- [CVE-2017-0155](https://cve.now/CVE-2017-0155.md): The Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows local user (no CVSS, Microsoft Windows Graphics Component)
- [CVE-2017-0156](https://cve.now/CVE-2017-0156.md): An elevation of privilege vulnerability exists in Windows 7, Windows 8.1, Windows RT 8.1, Windows 10, Windows Server 2008 R2, Windows Server (no CVSS, Microsoft Windows Graphics Component)
- [CVE-2017-0158](https://cve.now/CVE-2017-0158.md): An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1 Windows RT 8.1, an (no CVSS, Microsoft Windows)
- [CVE-2017-0159](https://cve.now/CVE-2017-0159.md): A security feature bypass vulnerability exists in Windows 10 1607, Windows Server 2012 R2, and Windows 2016 when ADFS incorrectly treats req (no CVSS, Microsoft Windows)
- [CVE-2017-0160](https://cve.now/CVE-2017-0160.md): Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious (no CVSS, Microsoft .NET Framework)
- [CVE-2017-0162](https://cve.now/CVE-2017-0162.md): A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012 R (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-0163](https://cve.now/CVE-2017-0163.md): A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input f (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-0164](https://cve.now/CVE-2017-0164.md): A denial of service vulnerability exists in Windows 10 1607 and Windows Server 2016 Active Directory when an authenticated attacker sends ma (no CVSS, Microsoft Active Directory)
- [CVE-2017-0165](https://cve.now/CVE-2017-0165.md): An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, a (no CVSS, Microsoft Windows)
- [CVE-2017-0166](https://cve.now/CVE-2017-0166.md): An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. (no CVSS, Microsoft LDAP)
- [CVE-2017-0167](https://cve.now/CVE-2017-0167.md): An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 w (no CVSS, Microsoft Windows)
- [CVE-2017-0168](https://cve.now/CVE-2017-0168.md): An information disclosure vulnerability exists when the Windows Hyper-V Network Switch running on a Windows 8.1, Windows Server 2008, Window (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-0169](https://cve.now/CVE-2017-0169.md): An information disclosure vulnerability exists when Windows Hyper-V running on a Windows 8.1, Windows Server 2012. (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-0178](https://cve.now/CVE-2017-0178.md): A denial of service vulnerability exists when Microsoft Hyper-V running on Windows 10, Windows 10 1511, Windows 10 1607, Windows 8.1, Window (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-0179](https://cve.now/CVE-2017-0179.md): A denial of service vulnerability exists when Microsoft Hyper-V running on a Windows 10, Windows 8.1, Windows Server 2012 R2, or Windows Ser (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-0180](https://cve.now/CVE-2017-0180.md): A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a host server fails to properly validate input f (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-0181](https://cve.now/CVE-2017-0181.md): A remote code execution vulnerability exists when Windows Hyper-V Network Switch running on a Windows 10 or Windows Server 2016 host server (no CVSS, Microsoft Windows Hyper-V)
- [CVE-2017-0182](https://cve.now/CVE-2017-0182.md): A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, (no CVSS, Microsoft Hyper-V)
- [CVE-2017-0183](https://cve.now/CVE-2017-0183.md): A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows Server 2008 R2, Windows 8.1, (no CVSS, Microsoft Hyper-V)
- [CVE-2017-0184](https://cve.now/CVE-2017-0184.md): A denial of service vulnerability exists when Microsoft Hyper-V running on a host server fails to properly validate input from a privileged (no CVSS, Microsoft Hyper-V)
- [CVE-2017-0185](https://cve.now/CVE-2017-0185.md): A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012, Wi (no CVSS, Microsoft Hyper-V)
- [CVE-2017-0186](https://cve.now/CVE-2017-0186.md): A denial of service vulnerability exists when Microsoft Hyper-V Network Switch running on a Windows 10, Windows 8.1, Windows Server 2012, Wi (no CVSS, Microsoft Hyper-V)
- [CVE-2017-0188](https://cve.now/CVE-2017-0188.md): A Win32k information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, Windows 10 (no CVSS, Microsoft Windows)
- [CVE-2017-0189](https://cve.now/CVE-2017-0189.md): An elevation of privilege vulnerability exists in Windows 10 when the Windows kernel-mode driver fails to properly handle objects in memory. (no CVSS, Microsoft Windows)
- [CVE-2017-0191](https://cve.now/CVE-2017-0191.md): A denial of service vulnerability exists in the way that Windows 7, Windows 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, Wi (no CVSS, Microsoft Windows)
- [CVE-2017-0192](https://cve.now/CVE-2017-0192.md): The Adobe Type Manager Font Driver (ATMFD.dll) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8. (no CVSS, Microsoft Windows)
- [CVE-2017-0194](https://cve.now/CVE-2017-0194.md): Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, and Office Compatibility Pack SP2 allow remote attackers to obtain sensitive information (no CVSS, Microsoft Office)
- [CVE-2017-0195](https://cve.now/CVE-2017-0195.md): Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 (no CVSS, Microsoft Office)
- [CVE-2017-0197](https://cve.now/CVE-2017-0197.md): Microsoft OneNote 2007 SP3 and Microsoft OneNote 2010 SP2 allow remote attackers to execute arbitrary code via a crafted document, aka "Micr (no CVSS, Microsoft Office)
- [CVE-2017-0199](https://cve.now/CVE-2017-0199.md): Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows (CVSS 7.8, KEV, Microsoft Office/WordPad)
- [CVE-2017-0200](https://cve.now/CVE-2017-0200.md): A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. (no CVSS, Microsoft Edge)
- [CVE-2017-0201](https://cve.now/CVE-2017-0201.md): A remote code execution vulnerability exists in Internet Explorer in the way that the JScript and VBScript engines render when handling obje (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-0202](https://cve.now/CVE-2017-0202.md): A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-0203](https://cve.now/CVE-2017-0203.md): A vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted do (no CVSS, Microsoft Edge Microsoft Edge)
- [CVE-2017-0204](https://cve.now/CVE-2017-0204.md): Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1, and Microsoft Outlook 2016 allow remote attackers to byp (no CVSS, Microsoft Outlook)
- [CVE-2017-0205](https://cve.now/CVE-2017-0205.md): A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. (no CVSS, Microsoft Edge)
- [CVE-2017-0207](https://cve.now/CVE-2017-0207.md): Microsoft Outlook for Mac 2011 allows remote attackers to spoof web content via a crafted email with specific HTML tags, aka "Microsoft Brow (no CVSS, Microsoft Outlook)
- [CVE-2017-0208](https://cve.now/CVE-2017-0208.md): An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory (no CVSS, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2017-0210](https://cve.now/CVE-2017-0210.md): An elevation of privilege vulnerability exists when Internet Explorer does not properly enforce cross-domain policies, which could allow an (CVSS 8.8, KEV, Microsoft Internet Explorer)
- [CVE-2017-0211](https://cve.now/CVE-2017-0211.md): An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and (no CVSS, Microsoft Windows OLE)
- [CVE-2017-2989](https://cve.now/CVE-2017-2989.md): Adobe Campaign versions Build 8770 and earlier have an input validation bypass that could be exploited to read, write, or delete data from t (no CVSS, Adobe Campaign Build 8770 and earlier.)
- [CVE-2017-3004](https://cve.now/CVE-2017-3004.md): Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have a memory corruption vulnerability when parsing (no CVSS, Adobe Photoshop CC 2017 (18.0.1) and earlier, CC 2015.5.1 (…)
- [CVE-2017-3005](https://cve.now/CVE-2017-3005.md): Adobe Photoshop versions CC 2017 (18.0.1) and earlier, CC 2015.5.1 (17.0.1) and earlier have an unquoted search path vulnerability. (no CVSS, Adobe Photoshop CC 2017 (18.0.1) and earlier, CC 2015.5.1 (…)
- [CVE-2017-3006](https://cve.now/CVE-2017-3006.md): Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation o (no CVSS, Adobe Thor 3.9.5.353 and earlier.)
- [CVE-2017-3007](https://cve.now/CVE-2017-3007.md): Adobe Thor versions 3.9.5.353 and earlier have a vulnerability in the directory search path used to find resources, related to Creative Clou (no CVSS, Adobe Thor 3.9.5.353 and earlier.)
- [CVE-2017-3011](https://cve.now/CVE-2017-3011.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow v (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3012](https://cve.now/CVE-2017-3012.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3013](https://cve.now/CVE-2017-3013.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an insecure library loading (DLL (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3014](https://cve.now/CVE-2017-3014.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vul (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3015](https://cve.now/CVE-2017-3015.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3017](https://cve.now/CVE-2017-3017.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3018](https://cve.now/CVE-2017-3018.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3019](https://cve.now/CVE-2017-3019.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3020](https://cve.now/CVE-2017-3020.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabili (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3021](https://cve.now/CVE-2017-3021.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabili (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3022](https://cve.now/CVE-2017-3022.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabili (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3023](https://cve.now/CVE-2017-3023.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3024](https://cve.now/CVE-2017-3024.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3025](https://cve.now/CVE-2017-3025.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3026](https://cve.now/CVE-2017-3026.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vul (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3027](https://cve.now/CVE-2017-3027.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vul (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3028](https://cve.now/CVE-2017-3028.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3029](https://cve.now/CVE-2017-3029.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabili (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3030](https://cve.now/CVE-2017-3030.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3031](https://cve.now/CVE-2017-3031.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabili (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3032](https://cve.now/CVE-2017-3032.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabili (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3033](https://cve.now/CVE-2017-3033.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabili (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3034](https://cve.now/CVE-2017-3034.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable integer overflow v (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3035](https://cve.now/CVE-2017-3035.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vul (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3036](https://cve.now/CVE-2017-3036.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3037](https://cve.now/CVE-2017-3037.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3038](https://cve.now/CVE-2017-3038.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3039](https://cve.now/CVE-2017-3039.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3040](https://cve.now/CVE-2017-3040.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3041](https://cve.now/CVE-2017-3041.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3042](https://cve.now/CVE-2017-3042.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vuln (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3043](https://cve.now/CVE-2017-3043.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabili (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3044](https://cve.now/CVE-2017-3044.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3045](https://cve.now/CVE-2017-3045.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabili (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3046](https://cve.now/CVE-2017-3046.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabili (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3047](https://cve.now/CVE-2017-3047.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vul (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3048](https://cve.now/CVE-2017-3048.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vuln (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3049](https://cve.now/CVE-2017-3049.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vuln (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3050](https://cve.now/CVE-2017-3050.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3051](https://cve.now/CVE-2017-3051.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3052](https://cve.now/CVE-2017-3052.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabili (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3053](https://cve.now/CVE-2017-3053.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have a memory address leak vulnerabili (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3054](https://cve.now/CVE-2017-3054.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3055](https://cve.now/CVE-2017-3055.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable heap overflow vuln (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3056](https://cve.now/CVE-2017-3056.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3057](https://cve.now/CVE-2017-3057.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable use after free vul (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2017-3058](https://cve.now/CVE-2017-3058.md): Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the sound class. (no CVSS, Adobe Flash Player 25.0.0.127 and earlier.)
- [CVE-2017-3059](https://cve.now/CVE-2017-3059.md): Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the internal script object. (no CVSS, Adobe Flash Player 25.0.0.127 and earlier.)
- [CVE-2017-3060](https://cve.now/CVE-2017-3060.md): Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the ActionScript2 code parser. (no CVSS, Adobe Flash Player 25.0.0.127 and earlier.)
- [CVE-2017-3061](https://cve.now/CVE-2017-3061.md): Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. (no CVSS, Adobe Flash Player 25.0.0.127 and earlier.)
- [CVE-2017-3062](https://cve.now/CVE-2017-3062.md): Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in ActionScript2 when creating a getter/ (no CVSS, Adobe Flash Player 25.0.0.127 and earlier.)
- [CVE-2017-3063](https://cve.now/CVE-2017-3063.md): Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable use after free vulnerability in the ActionScript2 NetStream class. (no CVSS, Adobe Flash Player 25.0.0.127 and earlier.)
- [CVE-2017-3064](https://cve.now/CVE-2017-3064.md): Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline. (no CVSS, Adobe Flash Player 25.0.0.127 and earlier.)
- [CVE-2017-3065](https://cve.now/CVE-2017-3065.md): Adobe Acrobat Reader versions 11.0.19 and earlier, 15.006.30280 and earlier, 15.023.20070 and earlier have an exploitable memory corruption (no CVSS, Adobe Acrobat Reader 11.0.19 and earlier, 15.006.30280 and…)
- [CVE-2016-7547](https://cve.now/CVE-2016-7547.md): A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin\_sys\_time.c (no CVSS)
- [CVE-2016-7552](https://cve.now/CVE-2016-7552.md): On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session\_id cookie allows a remote, unauthent (no CVSS)
- [CVE-2016-7957](https://cve.now/CVE-2016-7957.md): In Wireshark 2.2.0, the Bluetooth L2CAP dissector could crash, triggered by packet injection or a malformed capture file. (no CVSS)
- [CVE-2016-7958](https://cve.now/CVE-2016-7958.md): In Wireshark 2.2.0, the NCP dissector could crash, triggered by packet injection or a malformed capture file. (no CVSS)
- [CVE-2017-7588](https://cve.now/CVE-2017-7588.md): On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attemp (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-04-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.