# CVEs published 2017-04-24

281 CVEs were published on April 24, 2017: 0 critical, 2 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2017-5029](https://cve.now/CVE-2017-5029.md): The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, a (no CVSS, Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…)
- [CVE-2017-5030](https://cve.now/CVE-2017-5030.md): Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android (CVSS 8.8, KEV, Google Chrome prior to 57.0.2987.98 for Linux, Windows and…)
- [CVE-2017-5031](https://cve.now/CVE-2017-5031.md): A use after free in ANGLE in Google Chrome prior to 57.0.2987.98 for Windows allowed a remote attacker to perform an out of bounds memory re (no CVSS, Mozilla Firefox ESR · Mozilla Firefox)
- [CVE-2017-5032](https://cve.now/CVE-2017-5032.md): PDFium in Google Chrome prior to 57.0.2987.98 for Windows could be made to increment off the end of a buffer, which allowed a remote attacke (no CVSS, Google Chrome prior to 57.0.2987.98 for Windows)
- [CVE-2017-5033](https://cve.now/CVE-2017-5033.md): Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP res (no CVSS, Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…)
- [CVE-2017-5034](https://cve.now/CVE-2017-5034.md): A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Linux and Windows allowed a remote attacker to perform an out of bound (no CVSS, Google Chrome prior to 57.0.2987.98 for Linux and Windows)
- [CVE-2017-5035](https://cve.now/CVE-2017-5035.md): Google Chrome prior to 57.0.2987.98 for Windows and Mac had a race condition, which could cause Chrome to display incorrect certificate info (no CVSS, Google Chrome prior to 57.0.2987.98 for Windows and Mac)
- [CVE-2017-5036](https://cve.now/CVE-2017-5036.md): A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote (no CVSS, Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…)
- [CVE-2017-5037](https://cve.now/CVE-2017-5037.md): An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a rem (no CVSS, Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…)
- [CVE-2017-5038](https://cve.now/CVE-2017-5038.md): Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote (no CVSS, Google Chrome prior to 57.0.2987.98 for Linux, Windows and…)
- [CVE-2017-5039](https://cve.now/CVE-2017-5039.md): A use after free in PDFium in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote (no CVSS, Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…)
- [CVE-2017-5040](https://cve.now/CVE-2017-5040.md): V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android was missing a neutering check, which all (no CVSS, Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…)
- [CVE-2017-5041](https://cve.now/CVE-2017-5041.md): Google Chrome prior to 57.0.2987.100 incorrectly handled back-forward navigation, which allowed a remote attacker to display incorrect infor (no CVSS, Google Chrome prior to)
- [CVE-2017-5042](https://cve.now/CVE-2017-5042.md): Cast in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android sent cookies to sites discovered via S (no CVSS, Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…)
- [CVE-2017-5043](https://cve.now/CVE-2017-5043.md): Chrome Apps in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac had a use after free bug in GuestView, which allowed a remote (no CVSS, Google Chrome prior to 57.0.2987.98 for Linux, Windows and…)
- [CVE-2017-5044](https://cve.now/CVE-2017-5044.md): Heap buffer overflow in filter processing in Skia in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for A (no CVSS, Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…)
- [CVE-2017-5045](https://cve.now/CVE-2017-5045.md): XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked (no CVSS, Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…)
- [CVE-2017-5046](https://cve.now/CVE-2017-5046.md): V8 in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android had insufficient policy enforcement, whi (no CVSS, Google Chrome prior to 57.0.2987.98 for Mac, Windows and Li…)
- [CVE-2017-8106](https://cve.now/CVE-2017-8106.md): The handle\_invept function in arch/x86/kvm/vmx.c in the Linux kernel 3.12 through 3.15 allows privileged KVM guest OS users to cause a denia (no CVSS)
- [CVE-2016-6915](https://cve.now/CVE-2016-6915.md): Stack-based buffer overflow in nvhost\_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, a (no CVSS)
- [CVE-2010-1776](https://cve.now/CVE-2010-1776.md): Find My iPhone on iOS 2.0 through 3.1.3 for iPhone 3G and later and iOS 2.1 through 3.1.3 for iPod touch (2nd generation) and later, when Fi (no CVSS)
- [CVE-2011-3428](https://cve.now/CVE-2011-3428.md): Buffer overflow in QuickTime before 7.7.1 for Windows allows remote attackers to execute arbitrary code. (no CVSS)
- [CVE-2011-3438](https://cve.now/CVE-2011-3438.md): WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service (process crash) or arbitrary code execution. (no CVSS)
- [CVE-2016-5016](https://cve.now/CVE-2016-5016.md): Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (no CVSS, org.cloudfoundry.identity:cloudfoundry-identity-server)
- [CVE-2016-5551](https://cve.now/CVE-2016-5551.md): Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition). (no CVSS, Oracle Solaris Cluster)
- [CVE-2016-6902](https://cve.now/CVE-2016-6902.md): lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands. (no CVSS, limited-shell)
- [CVE-2016-6903](https://cve.now/CVE-2016-6903.md): lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands. (no CVSS, limited-shell)
- [CVE-2016-6916](https://cve.now/CVE-2016-6916.md): Integer overflow in nvhost\_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield T (no CVSS)
- [CVE-2016-6917](https://cve.now/CVE-2016-6917.md): Buffer overflow in nvhost\_job.c in the NVIDIA video driver for Android, Shield TV before OTA 3.3, Shield Table before OTA 4.4, and Shield Ta (no CVSS)
- [CVE-2017-3230](https://cve.now/CVE-2017-3230.md): Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder). (no CVSS, Oracle Fusion Middleware MapViewer)
- [CVE-2017-3232](https://cve.now/CVE-2017-3232.md): Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). (no CVSS, Oracle Automatic Service Request)
- [CVE-2017-3233](https://cve.now/CVE-2017-3233.md): Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). (no CVSS, Oracle Automatic Service Request)
- [CVE-2017-3234](https://cve.now/CVE-2017-3234.md): Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). (no CVSS, Oracle Automatic Service Request)
- [CVE-2017-3237](https://cve.now/CVE-2017-3237.md): Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). (no CVSS, Oracle Automatic Service Request)
- [CVE-2017-3254](https://cve.now/CVE-2017-3254.md): Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications (subcomponent: Security). (no CVSS, Oracle Retail Invoice Matching)
- [CVE-2017-3288](https://cve.now/CVE-2017-3288.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). (no CVSS, Oracle FLEXCUBE Investor Servicing)
- [CVE-2017-3304](https://cve.now/CVE-2017-3304.md): Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD). (no CVSS, Oracle MySQL Cluster)
- [CVE-2017-3305](https://cve.now/CVE-2017-3305.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3306](https://cve.now/CVE-2017-3306.md): Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server). (no CVSS, Oracle MySQL Enterprise Monitor)
- [CVE-2017-3307](https://cve.now/CVE-2017-3307.md): Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server). (no CVSS, Oracle MySQL Enterprise Monitor)
- [CVE-2017-3308](https://cve.now/CVE-2017-3308.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3309](https://cve.now/CVE-2017-3309.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3329](https://cve.now/CVE-2017-3329.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Thread Pooling). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3331](https://cve.now/CVE-2017-3331.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3337](https://cve.now/CVE-2017-3337.md): Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). (no CVSS, Oracle Marketing)
- [CVE-2017-3393](https://cve.now/CVE-2017-3393.md): Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: Interaction History). (no CVSS, Oracle Advanced Outbound Telephony)
- [CVE-2017-3432](https://cve.now/CVE-2017-3432.md): Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Audience workbench). (no CVSS, Oracle One-to-One Fulfillment)
- [CVE-2017-3450](https://cve.now/CVE-2017-3450.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3451](https://cve.now/CVE-2017-3451.md): Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Web). (no CVSS, Oracle Retail Open Commerce Platform Cloud Service)
- [CVE-2017-3452](https://cve.now/CVE-2017-3452.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3453](https://cve.now/CVE-2017-3453.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3454](https://cve.now/CVE-2017-3454.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3455](https://cve.now/CVE-2017-3455.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3456](https://cve.now/CVE-2017-3456.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3457](https://cve.now/CVE-2017-3457.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3458](https://cve.now/CVE-2017-3458.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3459](https://cve.now/CVE-2017-3459.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3460](https://cve.now/CVE-2017-3460.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3461](https://cve.now/CVE-2017-3461.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3462](https://cve.now/CVE-2017-3462.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3463](https://cve.now/CVE-2017-3463.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3464](https://cve.now/CVE-2017-3464.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3465](https://cve.now/CVE-2017-3465.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3467](https://cve.now/CVE-2017-3467.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: C API). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3468](https://cve.now/CVE-2017-3468.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3469](https://cve.now/CVE-2017-3469.md): Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security : Encryption). (no CVSS, Oracle MySQL Workbench)
- [CVE-2017-3470](https://cve.now/CVE-2017-3470.md): Vulnerability in the Oracle Communications Security Gateway component of Oracle Communications Applications (subcomponent: Network). (no CVSS, Oracle Communications Security Gateway)
- [CVE-2017-3471](https://cve.now/CVE-2017-3471.md): Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). (no CVSS, Oracle FLEXCUBE Private Banking)
- [CVE-2017-3472](https://cve.now/CVE-2017-3472.md): Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Portfolio Management (no CVSS, Oracle FLEXCUBE Private Banking)
- [CVE-2017-3473](https://cve.now/CVE-2017-3473.md): Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). (no CVSS, Oracle FLEXCUBE Private Banking)
- [CVE-2017-3474](https://cve.now/CVE-2017-3474.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zone). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-3475](https://cve.now/CVE-2017-3475.md): Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). (no CVSS, Oracle FLEXCUBE Private Banking)
- [CVE-2017-3476](https://cve.now/CVE-2017-3476.md): Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). (no CVSS, Oracle FLEXCUBE Private Banking)
- [CVE-2017-3477](https://cve.now/CVE-2017-3477.md): Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). (no CVSS, Oracle FLEXCUBE Private Banking)
- [CVE-2017-3478](https://cve.now/CVE-2017-3478.md): Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). (no CVSS, Oracle FLEXCUBE Private Banking)
- [CVE-2017-3479](https://cve.now/CVE-2017-3479.md): Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). (no CVSS, Oracle FLEXCUBE Private Banking)
- [CVE-2017-3480](https://cve.now/CVE-2017-3480.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2017-3481](https://cve.now/CVE-2017-3481.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2017-3482](https://cve.now/CVE-2017-3482.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2017-3483](https://cve.now/CVE-2017-3483.md): Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcom (no CVSS, Oracle FLEXCUBE Enterprise Limits and Collateral Management)
- [CVE-2017-3484](https://cve.now/CVE-2017-3484.md): Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcom (no CVSS, Oracle FLEXCUBE Enterprise Limits and Collateral Management)
- [CVE-2017-3485](https://cve.now/CVE-2017-3485.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2017-3486](https://cve.now/CVE-2017-3486.md): Vulnerability in the SQL\*Plus component of Oracle Database Server. (no CVSS, Oracle SQL\*Plus)
- [CVE-2017-3487](https://cve.now/CVE-2017-3487.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). (no CVSS, Oracle FLEXCUBE Investor Servicing)
- [CVE-2017-3488](https://cve.now/CVE-2017-3488.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). (no CVSS, Oracle FLEXCUBE Investor Servicing)
- [CVE-2017-3489](https://cve.now/CVE-2017-3489.md): Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Security Manageme (no CVSS, Oracle FLEXCUBE Investor Servicing)
- [CVE-2017-3490](https://cve.now/CVE-2017-3490.md): Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcom (no CVSS, Oracle FLEXCUBE Enterprise Limits and Collateral Management)
- [CVE-2017-3491](https://cve.now/CVE-2017-3491.md): Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcom (no CVSS, Oracle FLEXCUBE Enterprise Limits and Collateral Management)
- [CVE-2017-3492](https://cve.now/CVE-2017-3492.md): Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcom (no CVSS, Oracle FLEXCUBE Enterprise Limits and Collateral Management)
- [CVE-2017-3493](https://cve.now/CVE-2017-3493.md): Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcom (no CVSS, Oracle FLEXCUBE Enterprise Limits and Collateral Management)
- [CVE-2017-3494](https://cve.now/CVE-2017-3494.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Retail Teller). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2017-3495](https://cve.now/CVE-2017-3495.md): Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Pre-Login). (no CVSS, Oracle FLEXCUBE Direct Banking)
- [CVE-2017-3496](https://cve.now/CVE-2017-3496.md): Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcom (no CVSS, Oracle FLEXCUBE Enterprise Limits and Collateral Management)
- [CVE-2017-3497](https://cve.now/CVE-2017-3497.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Remote Administration Daemon). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-3498](https://cve.now/CVE-2017-3498.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-3499](https://cve.now/CVE-2017-3499.md): Vulnerability in the Oracle Social Network component of Oracle Fusion Middleware (subcomponent: Android Client). (no CVSS, Oracle Social Network)
- [CVE-2017-3500](https://cve.now/CVE-2017-3500.md): Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration). (no CVSS, Oracle Primavera Gateway)
- [CVE-2017-3501](https://cve.now/CVE-2017-3501.md): Vulnerability in the Primavera Unifier component of Oracle Primavera Products Suite (subcomponent: Platform). (no CVSS, Oracle Primavera Unifier)
- [CVE-2017-3502](https://cve.now/CVE-2017-3502.md): Vulnerability in the PeopleSoft Enterprise FIN Receivables component of Oracle PeopleSoft Products (subcomponent: Receivables). (no CVSS, Oracle PeopleSoft Enterprise FIN Receivables)
- [CVE-2017-3503](https://cve.now/CVE-2017-3503.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Ac (no CVSS, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2017-3504](https://cve.now/CVE-2017-3504.md): Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). (no CVSS)
- [CVE-2017-3505](https://cve.now/CVE-2017-3505.md): Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). (no CVSS, Oracle Automatic Service Request)
- [CVE-2017-3506](https://cve.now/CVE-2017-3506.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). (CVSS 7.4, KEV, Oracle WebLogic Server)
- [CVE-2017-3507](https://cve.now/CVE-2017-3507.md): Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: Web Console Design). (no CVSS, Oracle Service Bus)
- [CVE-2017-3508](https://cve.now/CVE-2017-3508.md): Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration). (no CVSS, Oracle Primavera Gateway)
- [CVE-2017-3509](https://cve.now/CVE-2017-3509.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). (no CVSS, Oracle Java)
- [CVE-2017-3510](https://cve.now/CVE-2017-3510.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized NIC driver). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-3511](https://cve.now/CVE-2017-3511.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE). (no CVSS, Oracle Java)
- [CVE-2017-3512](https://cve.now/CVE-2017-3512.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). (no CVSS, Oracle Java)
- [CVE-2017-3513](https://cve.now/CVE-2017-3513.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2017-3514](https://cve.now/CVE-2017-3514.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). (no CVSS, Oracle Java)
- [CVE-2017-3515](https://cve.now/CVE-2017-3515.md): Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: User Name/Password Management). (no CVSS, Oracle User Management)
- [CVE-2017-3516](https://cve.now/CVE-2017-3516.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized NIC driver). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-3517](https://cve.now/CVE-2017-3517.md): Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime SEC). (no CVSS, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2017-3518](https://cve.now/CVE-2017-3518.md): Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Grid Control (subcomponent: Discovery Framework (no CVSS, Oracle Enterprise Manager Base Platform)
- [CVE-2017-3519](https://cve.now/CVE-2017-3519.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-3520](https://cve.now/CVE-2017-3520.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-3521](https://cve.now/CVE-2017-3521.md): Vulnerability in the PeopleSoft Enterprise SCM Purchasing component of Oracle PeopleSoft Products (subcomponent: Supplier Registration). (no CVSS, Oracle PeopleSoft Enterprise SCM Purchasing)
- [CVE-2017-3522](https://cve.now/CVE-2017-3522.md): Vulnerability in the PeopleSoft Enterprise SCM eSupplier Connection component of Oracle PeopleSoft Products (subcomponent: Vendor). (no CVSS, Oracle PeopleSoft Enterprise SCM eSupplier Connection)
- [CVE-2017-3523](https://cve.now/CVE-2017-3523.md): Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). (no CVSS, Oracle MySQL Connectors · mysql:mysql-connector-java)
- [CVE-2017-3524](https://cve.now/CVE-2017-3524.md): Vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component of Oracle PeopleSoft Products (subcomponent: Bidder Registration (no CVSS, Oracle PeopleSoft Enterprise SCM Strategic Sourcing)
- [CVE-2017-3525](https://cve.now/CVE-2017-3525.md): Vulnerability in the PeopleSoft Enterprise SCM Service Procurement component of Oracle PeopleSoft Products (subcomponent: Usability). (no CVSS, Oracle PeopleSoft Enterprise SCM Services Procurement)
- [CVE-2017-3526](https://cve.now/CVE-2017-3526.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). (no CVSS, Oracle Java)
- [CVE-2017-3527](https://cve.now/CVE-2017-3527.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-3528](https://cve.now/CVE-2017-3528.md): Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: Popup windows (lists of values, datep (no CVSS, Oracle Applications Framework)
- [CVE-2017-3530](https://cve.now/CVE-2017-3530.md): Vulnerability in the Oracle Transportation Manager component of Oracle Supply Chain Products Suite (subcomponent: Security). (no CVSS, Oracle Transportation Management)
- [CVE-2017-3531](https://cve.now/CVE-2017-3531.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Servlet Runtime). (no CVSS, Oracle WebLogic Server)
- [CVE-2017-3532](https://cve.now/CVE-2017-3532.md): Vulnerability in the Oracle Retail Warehouse Management System component of Oracle Retail Applications (subcomponent: Security). (no CVSS, Oracle Retail Warehouse Management System)
- [CVE-2017-3533](https://cve.now/CVE-2017-3533.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). (no CVSS, Oracle Java)
- [CVE-2017-3534](https://cve.now/CVE-2017-3534.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2017-3535](https://cve.now/CVE-2017-3535.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2017-3536](https://cve.now/CVE-2017-3536.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-3537](https://cve.now/CVE-2017-3537.md): Vulnerability in the Oracle Real-Time Scheduler component of Oracle Utilities Applications (subcomponent: Mobile Communications Platform). (no CVSS, Oracle Real-Time Scheduler)
- [CVE-2017-3538](https://cve.now/CVE-2017-3538.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). (no CVSS, Oracle VM VirtualBox)
- [CVE-2017-3539](https://cve.now/CVE-2017-3539.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). (no CVSS, Oracle Java)
- [CVE-2017-3540](https://cve.now/CVE-2017-3540.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3541](https://cve.now/CVE-2017-3541.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3542](https://cve.now/CVE-2017-3542.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3543](https://cve.now/CVE-2017-3543.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Server). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3544](https://cve.now/CVE-2017-3544.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). (no CVSS, Oracle Java)
- [CVE-2017-3545](https://cve.now/CVE-2017-3545.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Blob Server). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3546](https://cve.now/CVE-2017-3546.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-3547](https://cve.now/CVE-2017-3547.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-3548](https://cve.now/CVE-2017-3548.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-3549](https://cve.now/CVE-2017-3549.md): Vulnerability in the Oracle Scripting component of Oracle E-Business Suite (subcomponent: Scripting Administration). (no CVSS, Oracle Scripting)
- [CVE-2017-3550](https://cve.now/CVE-2017-3550.md): Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: Admin Console). (no CVSS, Oracle Customer Interaction History)
- [CVE-2017-3551](https://cve.now/CVE-2017-3551.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Smartcard Libraries). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-3552](https://cve.now/CVE-2017-3552.md): Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Room Ima (no CVSS, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2017-3553](https://cve.now/CVE-2017-3553.md): Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Rules Engine). (no CVSS, Oracle Identity Manager)
- [CVE-2017-3554](https://cve.now/CVE-2017-3554.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3555](https://cve.now/CVE-2017-3555.md): Vulnerability in the Oracle iReceivables component of Oracle E-Business Suite (subcomponent: Self Registration). (no CVSS, Oracle iReceivables)
- [CVE-2017-3556](https://cve.now/CVE-2017-3556.md): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: File Management). (no CVSS, Oracle Application Object Library)
- [CVE-2017-3557](https://cve.now/CVE-2017-3557.md): Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server). (no CVSS, Oracle One-to-One Fulfillment)
- [CVE-2017-3558](https://cve.now/CVE-2017-3558.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2017-3559](https://cve.now/CVE-2017-3559.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2017-3560](https://cve.now/CVE-2017-3560.md): Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OXI Interface) (no CVSS, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2017-3561](https://cve.now/CVE-2017-3561.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2017-3563](https://cve.now/CVE-2017-3563.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2017-3564](https://cve.now/CVE-2017-3564.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-3565](https://cve.now/CVE-2017-3565.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RBAC). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-3567](https://cve.now/CVE-2017-3567.md): Vulnerability in the OJVM component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2017-3568](https://cve.now/CVE-2017-3568.md): Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Printing (no CVSS, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2017-3569](https://cve.now/CVE-2017-3569.md): Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Business (no CVSS, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2017-3570](https://cve.now/CVE-2017-3570.md): Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: eSettlements). (no CVSS, Oracle PeopleSoft Enterprise FIN eSettlements)
- [CVE-2017-3571](https://cve.now/CVE-2017-3571.md): Vulnerability in the PeopleSoft Enterprise SCM eBill Payment component of Oracle PeopleSoft Products (subcomponent: Security). (no CVSS, Oracle PeopleSoft Enterprise SCM eBill Payment)
- [CVE-2017-3572](https://cve.now/CVE-2017-3572.md): Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component of Oracle Commerce (subcomponent: MDEX). (no CVSS, Commerce Guided Search / Oracle Commerce Experience Manager)
- [CVE-2017-3573](https://cve.now/CVE-2017-3573.md): Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Printing (no CVSS, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2017-3574](https://cve.now/CVE-2017-3574.md): Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA License (no CVSS, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2017-3575](https://cve.now/CVE-2017-3575.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2017-3576](https://cve.now/CVE-2017-3576.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2017-3577](https://cve.now/CVE-2017-3577.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products (subcomponent: Frameworks). (no CVSS, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2017-3578](https://cve.now/CVE-2017-3578.md): Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems). (no CVSS, Oracle Sun ZFS Storage Appliance Kit (AK) Software)
- [CVE-2017-3579](https://cve.now/CVE-2017-3579.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Ac (no CVSS, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2017-3580](https://cve.now/CVE-2017-3580.md): Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems). (no CVSS, Oracle Sun ZFS Storage Appliance Kit (AK) Software)
- [CVE-2017-3581](https://cve.now/CVE-2017-3581.md): Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). (no CVSS, Oracle Automatic Service Request)
- [CVE-2017-3582](https://cve.now/CVE-2017-3582.md): Vulnerability in the Oracle SuperCluster Specific Software component of Oracle Sun Systems Products Suite (subcomponent: Backup/Restore Util (no CVSS, Oracle SuperCluster Specific Software)
- [CVE-2017-3583](https://cve.now/CVE-2017-3583.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Ac (no CVSS, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2017-3584](https://cve.now/CVE-2017-3584.md): Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: RAS subsystems). (no CVSS, Oracle Sun ZFS Storage Appliance Kit (AK) Software)
- [CVE-2017-3585](https://cve.now/CVE-2017-3585.md): Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface subsyst (no CVSS, Oracle Sun ZFS Storage Appliance Kit (AK) Software)
- [CVE-2017-3586](https://cve.now/CVE-2017-3586.md): Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). (no CVSS, Oracle MySQL Connectors · mysql:mysql-connector-java)
- [CVE-2017-3587](https://cve.now/CVE-2017-3587.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). (no CVSS, Oracle VM VirtualBox)
- [CVE-2017-3589](https://cve.now/CVE-2017-3589.md): Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). (no CVSS, Oracle MySQL Connectors · mysql:mysql-connector-java)
- [CVE-2017-3590](https://cve.now/CVE-2017-3590.md): Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python). (no CVSS, Oracle MySQL Connectors · mysql-connector-python)
- [CVE-2017-3591](https://cve.now/CVE-2017-3591.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Catalog Mover). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3592](https://cve.now/CVE-2017-3592.md): Vulnerability in the Oracle Payables component of Oracle E-Business Suite (subcomponent: Self Service Manager). (no CVSS, Oracle Payroll)
- [CVE-2017-3593](https://cve.now/CVE-2017-3593.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3594](https://cve.now/CVE-2017-3594.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3595](https://cve.now/CVE-2017-3595.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3596](https://cve.now/CVE-2017-3596.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3597](https://cve.now/CVE-2017-3597.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3598](https://cve.now/CVE-2017-3598.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3599](https://cve.now/CVE-2017-3599.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). (no CVSS)
- [CVE-2017-3600](https://cve.now/CVE-2017-3600.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump). (no CVSS, Oracle MySQL Server)
- [CVE-2017-3601](https://cve.now/CVE-2017-3601.md): Vulnerability in the Oracle API Gateway component of Oracle Fusion Middleware (subcomponent: Oracle API Gateway). (no CVSS, Oracle API Gateway)
- [CVE-2017-3602](https://cve.now/CVE-2017-3602.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3603](https://cve.now/CVE-2017-3603.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-3604](https://cve.now/CVE-2017-3604.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2017-3605](https://cve.now/CVE-2017-3605.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2017-3606](https://cve.now/CVE-2017-3606.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2017-3607](https://cve.now/CVE-2017-3607.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2017-3608](https://cve.now/CVE-2017-3608.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2017-3609](https://cve.now/CVE-2017-3609.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2017-3610](https://cve.now/CVE-2017-3610.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2017-3611](https://cve.now/CVE-2017-3611.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2017-3612](https://cve.now/CVE-2017-3612.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2017-3613](https://cve.now/CVE-2017-3613.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2017-3614](https://cve.now/CVE-2017-3614.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2017-3615](https://cve.now/CVE-2017-3615.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2017-3616](https://cve.now/CVE-2017-3616.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2017-3617](https://cve.now/CVE-2017-3617.md): Vulnerability in the Data Store component of Oracle Berkeley DB. (no CVSS, Oracle Berkeley DB)
- [CVE-2017-3618](https://cve.now/CVE-2017-3618.md): Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). (no CVSS, Oracle Automatic Service Request)
- [CVE-2017-3619](https://cve.now/CVE-2017-3619.md): Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). (no CVSS, Oracle Automatic Service Request)
- [CVE-2017-3620](https://cve.now/CVE-2017-3620.md): Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). (no CVSS, Oracle Automatic Service Request)
- [CVE-2017-3621](https://cve.now/CVE-2017-3621.md): Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: IPC Frameworks). (no CVSS, Oracle Sun ZFS Storage Appliance Kit (AK) Software)
- [CVE-2017-3622](https://cve.now/CVE-2017-3622.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment (CDE)). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-3623](https://cve.now/CVE-2017-3623.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-3625](https://cve.now/CVE-2017-3625.md): Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). (no CVSS, Oracle WebCenter Content)
- [CVE-2017-3626](https://cve.now/CVE-2017-3626.md): Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). (no CVSS, Oracle GlassFish Server)
- [CVE-2015-7245](https://cve.now/CVE-2015-7245.md): Directory traversal vulnerability in D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 allows remote attackers to read (no CVSS)
- [CVE-2015-7246](https://cve.now/CVE-2015-7246.md): D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 has a default password of root for the root account and tw for the tw (no CVSS)
- [CVE-2015-7247](https://cve.now/CVE-2015-7247.md): D-Link DVG-N5402SP with firmware W1000CN-00, W1000CN-03, or W2000EN-00 discloses usernames, passwords, keys, values, and web account hashes (no CVSS)
- [CVE-2015-7568](https://cve.now/CVE-2015-7568.md): SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the account credentials o (no CVSS)
- [CVE-2015-7569](https://cve.now/CVE-2015-7569.md): SQL injection vulnerability in "yeager/y.php/tab\_USERLIST" in Yeager CMS 1.2.1 allows local users to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2015-7570](https://cve.now/CVE-2015-7570.md): Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbound requests and enum (no CVSS)
- [CVE-2016-3076](https://cve.now/CVE-2016-3076.md): Heap-based buffer overflow in the j2k\_encode\_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of servi (no CVSS, pillow)
- [CVE-2016-3114](https://cve.now/CVE-2016-3114.md): Kallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or delete comments by leveraging read access. (no CVSS)
- [CVE-2016-3691](https://cve.now/CVE-2016-3691.md): Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method. (no CVSS, kallithea)
- [CVE-2016-4313](https://cve.now/CVE-2016-4313.md): Directory traversal vulnerability in unzip/extract feature in eXtplorer 2.1.9 allows remote attackers to execute arbitrary files via a .. (no CVSS)
- [CVE-2017-2322](https://cve.now/CVE-2017-2322.md): A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1, may allow an a (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-5191](https://cve.now/CVE-2017-5191.md): An XSS vulnerability on the /NAGErrors URI in NetIQ Access Manager 4.2 and 4.3 exists because Access Gateway Error pages do not validate the (no CVSS, NetIQ Access Manager 4.2 and NetIQ Access Manager)
- [CVE-2017-7723](https://cve.now/CVE-2017-7723.md): XSS exists in Easy WP SMTP (before 1.2.5), a WordPress Plugin, via the e-mail subject or body. (no CVSS)
- [CVE-2017-8098](https://cve.now/CVE-2017-8098.md): e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing, meta-changing, and settings-changing. (no CVSS)
- [CVE-2017-8099](https://cve.now/CVE-2017-8099.md): There is CSRF in the WHIZZ plugin before 1.1.1 for WordPress, allowing attackers to delete any WordPress users and change the plugin's statu (no CVSS)
- [CVE-2017-8100](https://cve.now/CVE-2017-8100.md): There is CSRF in the CopySafe Web Protection plugin before 2.6 for WordPress, allowing attackers to change plugin settings. (no CVSS)
- [CVE-2017-8101](https://cve.now/CVE-2017-8101.md): There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request. (no CVSS)
- [CVE-2017-8102](https://cve.now/CVE-2017-8102.md): Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor (no CVSS)
- [CVE-2017-8103](https://cve.now/CVE-2017-8103.md): In MyBB before 1.8.11, the Email MyCode component allows XSS, as demonstrated by an onmouseover event. (no CVSS)
- [CVE-2017-8104](https://cve.now/CVE-2017-8104.md): In MyBB before 1.8.11, the smilie module allows Directory Traversal via the pathfolder parameter. (no CVSS)
- [CVE-2017-8105](https://cve.now/CVE-2017-8105.md): FreeType 2 before 2017-03-24 has an out-of-bounds write caused by a heap-based buffer overflow related to the t1\_decoder\_parse\_charstrings f (no CVSS)
- [CVE-2017-1000357](https://cve.now/CVE-2017-1000357.md): Denial of Service attack when the switch rejects to receive packets from the controller. (no CVSS)
- [CVE-2017-1000358](https://cve.now/CVE-2017-1000358.md): Controller throws an exception and does not allow user to add subsequent flow for a particular switch. (no CVSS)
- [CVE-2017-1000359](https://cve.now/CVE-2017-1000359.md): Java out of memory error and significant increase in resource consumption. (no CVSS)
- [CVE-2017-1000360](https://cve.now/CVE-2017-1000360.md): StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. (no CVSS, org.opendaylight.controller:releasepom)
- [CVE-2017-1000361](https://cve.now/CVE-2017-1000361.md): DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. (no CVSS, org.opendaylight.controller:releasepom)
- [CVE-2017-2312](https://cve.now/CVE-2017-2312.md): On Juniper Networks devices running Junos OS affected versions and with LDP enabled, a specific LDP packet destined to the RE (Routing Engin (no CVSS, Juniper Networks Junos OS with LDP enabled)
- [CVE-2017-2313](https://cve.now/CVE-2017-2313.md): Juniper Networks devices running affected Junos OS versions may be impacted by the receipt of a crafted BGP UPDATE which can lead to an rpd (no CVSS, Juniper Networks Junos OS with BGP enabled)
- [CVE-2017-2315](https://cve.now/CVE-2017-2315.md): On Juniper Networks EX Series Ethernet Switches running affected Junos OS versions, a vulnerability in IPv6 processing has been discovered t (no CVSS, Juniper Networks Junos OS on EX series Ethernet Switches wi…)
- [CVE-2017-2316](https://cve.now/CVE-2017-2316.md): A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an auth (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2317](https://cve.now/CVE-2017-2317.md): A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an un (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2318](https://cve.now/CVE-2017-2318.md): A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an authenticated malici (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2319](https://cve.now/CVE-2017-2319.md): A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a malicious attacker to (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2320](https://cve.now/CVE-2017-2320.md): A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unp (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2321](https://cve.now/CVE-2017-2321.md): A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated, unp (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2323](https://cve.now/CVE-2017-2323.md): A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a mal (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2324](https://cve.now/CVE-2017-2324.md): A command injection vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a net (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2325](https://cve.now/CVE-2017-2325.md): A buffer overflow vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an auth (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2326](https://cve.now/CVE-2017-2326.md): An information disclosure vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2327](https://cve.now/CVE-2017-2327.md): A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an au (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2328](https://cve.now/CVE-2017-2328.md): An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an un (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2329](https://cve.now/CVE-2017-2329.md): An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2330](https://cve.now/CVE-2017-2330.md): A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an un (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2331](https://cve.now/CVE-2017-2331.md): A firewall bypass vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a netwo (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2332](https://cve.now/CVE-2017-2332.md): An insufficient authentication vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2333](https://cve.now/CVE-2017-2333.md): A persistent denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2334](https://cve.now/CVE-2017-2334.md): An information leak vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow a net (no CVSS, Juniper Networks NorthStar Controller Application)
- [CVE-2017-2340](https://cve.now/CVE-2017-2340.md): On Juniper Networks Junos OS 15.1 releases from 15.1R3 to 15.1R4, 16.1 prior to 16.1R3, on M/MX platforms where Enhanced Subscriber Manageme (no CVSS, Juniper Networks Junos OS on M/MX platforms where Enhanced…)
- [CVE-2017-8085](https://cve.now/CVE-2017-8085.md): In Exponent CMS before 2.4.1 Patch #5, XSS in elFinder is possible in framework/modules/file/connector/elfinder.php. (no CVSS)
- [CVE-2017-7852](https://cve.now/CVE-2017-7852.md): D-Link DCS cameras have a weak/insecure CrossDomain.XML file that allows sites hosting malicious Flash objects to access and/or change the d (no CVSS)
- [CVE-2017-7944](https://cve.now/CVE-2017-7944.md): XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of an Install DB failure error message in page\_dbsettings.php. (no CVSS)
- [CVE-2007-6761](https://cve.now/CVE-2007-6761.md): drivers/media/video/videobuf-vmalloc.c in the Linux kernel before 2.6.24 does not initialize videobuf\_mapping data structures, which allows (no CVSS)
- [CVE-2010-5321](https://cve.now/CVE-2010-5321.md): Memory leak in drivers/media/video/videobuf-core.c in the videobuf subsystem in the Linux kernel 2.6.x through 4.x allows local users to cau (no CVSS)
- [CVE-2010-5329](https://cve.now/CVE-2010-5329.md): The video\_usercopy function in drivers/media/video/v4l2-ioctl.c in the Linux kernel before 2.6.39 relies on the count value of a v4l2\_ext\_co (no CVSS)
- [CVE-2014-9654](https://cve.now/CVE-2014-9654.md): The Regular Expressions package in International Components for Unicode (ICU) for C/C++ before 2014-12-03, as used in Google Chrome before 4 (no CVSS)
- [CVE-2014-9680](https://cve.now/CVE-2014-9680.md): sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arb (no CVSS)
- [CVE-2015-0104](https://cve.now/CVE-2015-0104.md): IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 (no CVSS)
- [CVE-2015-0107](https://cve.now/CVE-2015-0107.md): IBM Tivoli IT Asset Management for IT, Tivoli Service Request Manager, and Change and Configuration Management Database 7.1 through 7.1.1.8 (no CVSS)
- [CVE-2015-1521](https://cve.now/CVE-2015-1521.md): analyzer/protocol/dnp3/DNP3.cc in Bro before 2.3.2 does not properly handle zero values of a packet length, which allows remote attackers to (no CVSS)
- [CVE-2015-1522](https://cve.now/CVE-2015-1522.md): analyzer/protocol/dnp3/DNP3.cc in Bro before 2.3.2 does not reject certain non-zero values of a packet length, which allows remote attackers (no CVSS)
- [CVE-2015-8109](https://cve.now/CVE-2015-8109.md): Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by making a prediction of (no CVSS)
- [CVE-2015-8110](https://cve.now/CVE-2015-8110.md): Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by navigating to (1) "Clic (no CVSS)
- [CVE-2017-8082](https://cve.now/CVE-2017-8082.md): concrete5 8.1.0 has CSRF in Thumbnail Editor in the File Manager, which allows remote attackers to disable the entire installation by merely (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-04-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.