# CVEs published 2017-04-23 19 CVEs were published on April 23, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-8074](https://cve.now/CVE-2017-8074.md): On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "SEND data" log lines where passwords are encoded in hexadec (no CVSS) - [CVE-2017-8075](https://cve.now/CVE-2017-8075.md): On the TP-Link TL-SG108E 1.0, a remote attacker could retrieve credentials from "Switch Info" log lines where passwords are in cleartext. (no CVSS) - [CVE-2017-8076](https://cve.now/CVE-2017-8076.md): On the TP-Link TL-SG108E 1.0, admin network communications are RC4 encoded, even though RC4 is deprecated. (no CVSS) - [CVE-2017-8077](https://cve.now/CVE-2017-8077.md): On the TP-Link TL-SG108E 1.0, there is a hard-coded ciphering key (a long string beginning with Ei2HNryt). (no CVSS) - [CVE-2017-8078](https://cve.now/CVE-2017-8078.md): On the TP-Link TL-SG108E 1.0, the upgrade process can be requested remotely without authentication (httpupg.cgi with a parameter called cmd) (no CVSS) - [CVE-2016-2564](https://cve.now/CVE-2016-2564.md): Invision Power Services (IPS) Community Suite before 4.1.9 makes session hijack easier by relying on the PHP uniqid function without the mor (no CVSS) - [CVE-2017-8073](https://cve.now/CVE-2017-8073.md): WeeChat before 1.7.1 allows a remote crash by sending a filename via DCC to the IRC plugin. (no CVSS) - [CVE-2017-8061](https://cve.now/CVE-2017-8061.md): drivers/media/usb/dvb-usb/dvb-usb-firmware.c in the Linux kernel 4.9.x and 4.10.x before 4.10.7 interacts incorrectly with the CONFIG\_VMAP\_S (no CVSS) - [CVE-2017-8062](https://cve.now/CVE-2017-8062.md): drivers/media/usb/dvb-usb/dw2102.c in the Linux kernel 4.9.x and 4.10.x before 4.10.4 interacts incorrectly with the CONFIG\_VMAP\_STACK optio (no CVSS) - [CVE-2017-8063](https://cve.now/CVE-2017-8063.md): drivers/media/usb/dvb-usb/cxusb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG\_VMAP\_STACK optio (no CVSS) - [CVE-2017-8064](https://cve.now/CVE-2017-8064.md): drivers/media/usb/dvb-usb-v2/dvb\_usb\_core.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG\_VMAP\_S (no CVSS) - [CVE-2017-8065](https://cve.now/CVE-2017-8065.md): crypto/ccm.c in the Linux kernel 4.9.x and 4.10.x through 4.10.12 interacts incorrectly with the CONFIG\_VMAP\_STACK option, which allows loca (no CVSS) - [CVE-2017-8066](https://cve.now/CVE-2017-8066.md): drivers/net/can/usb/gs\_usb.c in the Linux kernel 4.9.x and 4.10.x before 4.10.2 interacts incorrectly with the CONFIG\_VMAP\_STACK option, whi (no CVSS) - [CVE-2017-8067](https://cve.now/CVE-2017-8067.md): drivers/char/virtio\_console.c in the Linux kernel 4.9.x and 4.10.x before 4.10.12 interacts incorrectly with the CONFIG\_VMAP\_STACK option, w (no CVSS) - [CVE-2017-8068](https://cve.now/CVE-2017-8068.md): drivers/net/usb/pegasus.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG\_VMAP\_STACK option, which allows loca (no CVSS) - [CVE-2017-8069](https://cve.now/CVE-2017-8069.md): drivers/net/usb/rtl8150.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG\_VMAP\_STACK option, which allows loca (no CVSS) - [CVE-2017-8070](https://cve.now/CVE-2017-8070.md): drivers/net/usb/catc.c in the Linux kernel 4.9.x before 4.9.11 interacts incorrectly with the CONFIG\_VMAP\_STACK option, which allows local u (no CVSS) - [CVE-2017-8071](https://cve.now/CVE-2017-8071.md): drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 uses a spinlock without considering that sleeping is possible in a USB HID r (no CVSS) - [CVE-2017-8072](https://cve.now/CVE-2017-8072.md): The cp2112\_gpio\_direction\_input function in drivers/hid/hid-cp2112.c in the Linux kernel 4.9.x before 4.9.9 does not have the expected EIO e (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-04-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.