# CVEs published 2017-04-30 29 CVEs were published on April 30, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-8371](https://cve.now/CVE-2017-8371.md): Schneider Electric StruxureWare Data Center Expert before 7.4.0 uses cleartext RAM storage for passwords, which might allow remote attackers (no CVSS) - [CVE-2017-8081](https://cve.now/CVE-2017-8081.md): Poor cryptographic salt initialization in admin/inc/template\_functions.php in GetSimple CMS 3.3.13 allows a network attacker to escalate pri (no CVSS) - [CVE-2017-8361](https://cve.now/CVE-2017-8361.md): The flac\_buffer\_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer overflow and appli (no CVSS) - [CVE-2017-8362](https://cve.now/CVE-2017-8362.md): The flac\_buffer\_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (invalid read and applicat (no CVSS) - [CVE-2017-8363](https://cve.now/CVE-2017-8363.md): The flac\_buffer\_copy function in flac.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (heap-based buffer over-re (no CVSS) - [CVE-2017-8364](https://cve.now/CVE-2017-8364.md): The read\_buf function in stream.c in rzip 2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and applicati (no CVSS) - [CVE-2017-8365](https://cve.now/CVE-2017-8365.md): The i2les\_array function in pcm.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service (buffer over-read and applicatio (no CVSS) - [CVE-2017-8366](https://cve.now/CVE-2017-8366.md): The strescape function in ec\_strings.c in Ettercap 0.8.2 allows remote attackers to cause a denial of service (heap-based buffer overflow an (no CVSS) - [CVE-2017-8367](https://cve.now/CVE-2017-8367.md): Buffer overflow in Ether Software Easy MOV Converter 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, Easy Avi/Divx/Xvid to DVD B (no CVSS) - [CVE-2017-7721](https://cve.now/CVE-2017-7721.md): IrfanView version 4.44 (32bit) with FPX Plugin before 4.45 has an Access Violation and crash in processing a FlashPix (.FPX) file. (no CVSS) - [CVE-2017-8339](https://cve.now/CVE-2017-8339.md): PSKMAD.sys in Panda Free Antivirus 18.0 allows local users to cause a denial of service (BSoD) via a crafted DeviceIoControl request to \\\\.\\ (no CVSS) - [CVE-2017-8343](https://cve.now/CVE-2017-8343.md): In ImageMagick 7.0.5-5, the ReadAAIImage function in aai.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8344](https://cve.now/CVE-2017-8344.md): In ImageMagick 7.0.5-5, the ReadPCXImage function in pcx.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8345](https://cve.now/CVE-2017-8345.md): In ImageMagick 7.0.5-5, the ReadMNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8346](https://cve.now/CVE-2017-8346.md): In ImageMagick 7.0.5-5, the ReadDCMImage function in dcm.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8347](https://cve.now/CVE-2017-8347.md): In ImageMagick 7.0.5-5, the ReadEXRImage function in exr.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8348](https://cve.now/CVE-2017-8348.md): In ImageMagick 7.0.5-5, the ReadMATImage function in mat.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8349](https://cve.now/CVE-2017-8349.md): In ImageMagick 7.0.5-5, the ReadSFWImage function in sfw.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8350](https://cve.now/CVE-2017-8350.md): In ImageMagick 7.0.5-5, the ReadJNGImage function in png.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8351](https://cve.now/CVE-2017-8351.md): In ImageMagick 7.0.5-5, the ReadPCDImage function in pcd.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8352](https://cve.now/CVE-2017-8352.md): In ImageMagick 7.0.5-5, the ReadXWDImage function in xwd.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8353](https://cve.now/CVE-2017-8353.md): In ImageMagick 7.0.5-5, the ReadPICTImage function in pict.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8354](https://cve.now/CVE-2017-8354.md): In ImageMagick 7.0.5-5, the ReadBMPImage function in bmp.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8355](https://cve.now/CVE-2017-8355.md): In ImageMagick 7.0.5-5, the ReadMTVImage function in mtv.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8356](https://cve.now/CVE-2017-8356.md): In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8357](https://cve.now/CVE-2017-8357.md): In ImageMagick 7.0.5-5, the ReadEPTImage function in ept.c allows attackers to cause a denial of service (memory leak) via a crafted file. (no CVSS) - [CVE-2017-8358](https://cve.now/CVE-2017-8358.md): LibreOffice before 2017-03-17 has an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function in vcl/sour (no CVSS) - [CVE-2017-8359](https://cve.now/CVE-2017-8359.md): Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc\_call\_destroy function in (no CVSS, grpcio) - [CVE-2017-8342](https://cve.now/CVE-2017-8342.md): Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authenticati (no CVSS, radicale) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-04-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.