# CVEs published 2017-05-09

40 CVEs were published on May 9, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-0341](https://cve.now/CVE-2017-0341.md): All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEsca (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0342](https://cve.now/CVE-2017-0342.md): All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where incorrec (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0343](https://cve.now/CVE-2017-0343.md): All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) where user can trigger (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0344](https://cve.now/CVE-2017-0344.md): All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEsca (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0345](https://cve.now/CVE-2017-0345.md): All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEsca (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0346](https://cve.now/CVE-2017-0346.md): All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEsc (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0347](https://cve.now/CVE-2017-0347.md): All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEsc (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0348](https://cve.now/CVE-2017-0348.md): All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler where a NULL p (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0349](https://cve.now/CVE-2017-0349.md): All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEsc (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0350](https://cve.now/CVE-2017-0350.md): All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a value passed from a user to t (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0351](https://cve.now/CVE-2017-0351.md): All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler where a NULL pointer dereference caus (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0352](https://cve.now/CVE-2017-0352.md): All versions of the NVIDIA GPU Display Driver contain a vulnerability in the GPU firmware where incorrect access control may allow CPU acces (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0353](https://cve.now/CVE-2017-0353.md): All versions of the NVIDIA GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgDdiEscape where due to imprope (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0354](https://cve.now/CVE-2017-0354.md): All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where a cal (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-0355](https://cve.now/CVE-2017-0355.md): All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer handler for DxgkDdiEscape where it ma (no CVSS, Nvidia GPU Display Driver)
- [CVE-2017-8856](https://cve.now/CVE-2017-8856.md): In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated, arbitrary remote command execution u (no CVSS)
- [CVE-2017-8857](https://cve.now/CVE-2017-8857.md): In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated file copy and arbitrary remote comman (no CVSS)
- [CVE-2017-8858](https://cve.now/CVE-2017-8858.md): In Veritas NetBackup 8.0 and earlier and NetBackup Appliance 3.0 and earlier, there is unauthenticated privileged remote file write using th (no CVSS)
- [CVE-2017-8859](https://cve.now/CVE-2017-8859.md): In Veritas NetBackup Appliance 3.0 and earlier, unauthenticated users can execute arbitrary commands as root. (no CVSS)
- [CVE-2017-5527](https://cve.now/CVE-2017-5527.md): TIBCO Spotfire injection vulnerabilities (CVSS 4.3, TIBCO Software TIBCO Spotfire Server · TIBCO Software TIBCO…)
- [CVE-2017-8854](https://cve.now/CVE-2017-8854.md): wolfSSL before 3.10.2 has an out-of-bounds memory access with loading crafted DH parameters, aka a buffer overflow triggered by a malformed (no CVSS)
- [CVE-2017-8855](https://cve.now/CVE-2017-8855.md): wolfSSL before 3.11.0 does not prevent wc\_DhAgree from accepting a malformed DH key. (no CVSS)
- [CVE-2017-7967](https://cve.now/CVE-2017-7967.md): All versions of VAMPSET software produced by Schneider Electric, prior to V2.2.189, are susceptible to a memory corruption vulnerability whe (no CVSS, Schneider Electric SE VAMPSET)
- [CVE-2017-3067](https://cve.now/CVE-2017-3067.md): Adobe Experience Manager Forms versions 6.2, 6.1, 6.0 have an information disclosure vulnerability resulting from abuse of the pre-populatio (no CVSS, Adobe Experience Manager Forms 6.2, 6.1,)
- [CVE-2017-3068](https://cve.now/CVE-2017-3068.md): Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Advanced Video Coding engine. (no CVSS, Adobe Flash Player 25.0.0.148 and earlier.)
- [CVE-2017-3069](https://cve.now/CVE-2017-3069.md): Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BlendMode class. (no CVSS, Adobe Flash Player 25.0.0.148 and earlier.)
- [CVE-2017-3070](https://cve.now/CVE-2017-3070.md): Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the ConvolutionFilter class. (no CVSS, Adobe Flash Player 25.0.0.148 and earlier.)
- [CVE-2017-3071](https://cve.now/CVE-2017-3071.md): Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when masking display objects. (no CVSS, Adobe Flash Player 25.0.0.148 and earlier.)
- [CVE-2017-3072](https://cve.now/CVE-2017-3072.md): Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the BitmapData class. (no CVSS, Adobe Flash Player 25.0.0.148 and earlier.)
- [CVE-2017-3073](https://cve.now/CVE-2017-3073.md): Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable use after free vulnerability when handling multiple mask properties o (no CVSS, Adobe Flash Player 25.0.0.148 and earlier.)
- [CVE-2017-3074](https://cve.now/CVE-2017-3074.md): Adobe Flash Player versions 25.0.0.148 and earlier have an exploitable memory corruption vulnerability in the Graphics class. (no CVSS, Adobe Flash Player 25.0.0.148 and earlier.)
- [CVE-2017-8853](https://cve.now/CVE-2017-8853.md): Fiyo CMS v2.0.7 has an arbitrary file delete vulnerability in dapur/apps/app\_config/controller/backuper.php via directory traversal in the f (no CVSS)
- [CVE-2016-6799](https://cve.now/CVE-2016-6799.md): Product: Apache Cordova Android 5.2.2 and earlier. (no CVSS, Apache Software Foundation Apache Cordova Android · cordova…)
- [CVE-2016-9251](https://cve.now/CVE-2016-9251.md): In F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation of privileges through a crafted iControl RE (no CVSS, F5 Networks BIG-IP)
- [CVE-2016-9253](https://cve.now/CVE-2016-9253.md): In F5 BIG-IP 12.1.0 through 12.1.2, specific websocket traffic patterns may cause a disruption of service for virtual servers configured to (no CVSS, F5 Networks BIG-IP)
- [CVE-2016-9256](https://cve.now/CVE-2016-9256.md): In F5 BIG-IP 12.1.0 through 12.1.2, permissions enforced by iControl can lag behind the actual permissions assigned to a user if the role\_ma (no CVSS, F5 Networks BIG-IP)
- [CVE-2016-9257](https://cve.now/CVE-2016-9257.md): In F5 BIG-IP APM 12.0.0 through 12.1.2, non-authenticated users may be able to inject JavaScript into a request that will then be rendered a (no CVSS, F5 Networks BIG-IP APM)
- [CVE-2017-0302](https://cve.now/CVE-2017-0302.md): In F5 BIG-IP APM 12.0.0 through 12.1.2 and 13.0.0, an authenticated user with an established access session to the BIG-IP APM system may be (no CVSS, F5 Networks BIG-IP APM)
- [CVE-2017-6137](https://cve.now/CVE-2017-6137.md): In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, and WebSafe 11.6.1 HF1, (no CVSS, F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…)
- [CVE-2017-0290](https://cve.now/CVE-2017-0290.md): The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP (no CVSS, Microsoft Malware Protection Engine)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-05-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.