CVEs published May 9, 2017
40 CVEs were published on May 9, 2017: 0 critical, 0 high.
- Published
- 40
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 39
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Nvidia GPU Display Driver
- 15
- Adobe Flash Player 25.0.0.148 and earlier.
- 7
- F5 Networks BIG-IP
- 3
- F5 Networks BIG-IP APM
- 2
- Adobe Experience Manager Forms 6.2, 6.1,
- 1
- Apache Software Foundation Apache Cordova Android · cordova…
- 1
- F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- 1
- Microsoft Malware Protection Engine
- 1
- Schneider Electric SE VAMPSET
- 1
- TIBCO Software TIBCO Spotfire Server · TIBCO Software TIBCO…
- 1
Medium, low and unrated 40
- CVE-2017-0341All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscaNvidia GPU Display Driver
- CVE-2017-0342All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where incorrecNvidia GPU Display Driver
- CVE-2017-0343All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) where user can triggerNvidia GPU Display Driver
- CVE-2017-0344All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscaNvidia GPU Display Driver
- CVE-2017-0345All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscaNvidia GPU Display Driver
- CVE-2017-0346All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscNvidia GPU Display Driver
- CVE-2017-0347All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscNvidia GPU Display Driver
- CVE-2017-0348All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a NULL pNvidia GPU Display Driver
- CVE-2017-0349All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscNvidia GPU Display Driver
- CVE-2017-0350All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to tNvidia GPU Display Driver
- CVE-2017-0351All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference causNvidia GPU Display Driver
- CVE-2017-0352All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU accesNvidia GPU Display Driver
- CVE-2017-0353All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where due to impropeNvidia GPU Display Driver
- CVE-2017-0354All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where a calNvidia GPU Display Driver
- CVE-2017-0355All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where it maNvidia GPU Display Driver
- CVE-2017-8856In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution u
- CVE-2017-8857In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote comman
- CVE-2017-8858In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using th
- CVE-2017-8859In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root.
- CVE-2017-5527TIBCO Spotfire injection vulnerabilitiesTIBCO Software TIBCO Spotfire Server · TIBCO Software TIBCO…
- CVE-2017-8854wolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka a buffer overflow triggered by a malformed
- CVE-2017-8855wolfSSL before 3.11.0 does not prevent wc_DhAgree from accepting a malformed DH key.
- CVE-2017-7967All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corruption vulnerability wheSchneider Electric SE VAMPSET
- CVE-2017-3067Adobe Experience Manager Forms versions 6.2, 6.1, 6.0 have an information disclosure vulnerability resulting from abuse of the pre-populatioAdobe Experience Manager Forms 6.2, 6.1,
- CVE-2017-3068Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine.Adobe Flash Player 25.0.0.148 and earlier.
- CVE-2017-3069Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class.Adobe Flash Player 25.0.0.148 and earlier.
- CVE-2017-3070Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class.Adobe Flash Player 25.0.0.148 and earlier.
- CVE-2017-3071Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects.Adobe Flash Player 25.0.0.148 and earlier.
- CVE-2017-3072Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class.Adobe Flash Player 25.0.0.148 and earlier.
- CVE-2017-3073Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties oAdobe Flash Player 25.0.0.148 and earlier.
- CVE-2017-3074Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class.Adobe Flash Player 25.0.0.148 and earlier.
- CVE-2017-8853Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/app_config/controller/backuper.php via directory traversal in the f
- CVE-2016-6799Product: Apache Cordova Android 5.2.2 and earlier.Apache Software Foundation Apache Cordova Android · cordova…
- CVE-2016-9251In F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation of privileges through a crafted iControl REF5 Networks BIG-IP
- CVE-2016-9253In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured to F5 Networks BIG-IP
- CVE-2016-9256In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role_maF5 Networks BIG-IP
- CVE-2016-9257In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered aF5 Networks BIG-IP APM
- CVE-2017-0302In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be F5 Networks BIG-IP APM
- CVE-2017-6137In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2017-0290The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SPMicrosoft Malware Protection Engine