CVEs published May 11, 2017
25 CVEs were published on May 11, 2017: 0 critical, 0 high.
- Published
- 25
- Critical
- 0
- High
- 0
- Medium
- 2
- Low
- 0
- Unrated
- 23
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Symantec ASG · Symantec ProxySG
- 2
- F5 Networks BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Contr…
- 1
- HP Integrated Lights-Out
- 1
- Linux kernel before
- 1
- Mozilla Thunderbird · Mozilla Firefox ESR +1
- 1
- Siemens AG Primary Setup Tool · Siemens AG SIMATIC Auto… +15
- 1
- Siemens Development/Evaluation Kits for PROFINET IO: D… +106
- 1
- Siemens Development/Evaluation Kits for PROFINET IO: DK… +93
- 1
- Siemens SIMATIC WinCC
- 1
- Symantec Advanced Secure Gateway (ASG) and ProxySG
- 1
Medium, low and unrated 25
- CVE-2017-8906An integer underflow vulnerability exists in pixel-a.asm, the x86 assembly code for planeClipAndMax() in MulticoreWare x265 through 2.4, as
- CVE-2017-7472The KEYS subsystem in the Linux kernel before 4.10.13 allows local users to cause a denial of service (memory consumption) via a series of KLinux kernel before
- CVE-2017-8903Xen through 4.8.x on 64-bit platforms mishandles page tables after an IRET hypercall, which might allow PV guest OS users to execute arbitra
- CVE-2017-8904Xen through 4.8.x mishandles the "contains segment descriptors" property during GNTTABOP_transfer (aka guest transfer) operations, which mig
- CVE-2017-8905Xen through 4.6.x on 64-bit platforms mishandles a failsafe callback, which might allow PV guest OS users to execute arbitrary code on the h
- CVE-2016-10370An issue was discovered on OnePlus devices such as the 3T.
- CVE-2017-5948An issue was discovered on OnePlus One, X, 2, 3, and 3T devices.
- CVE-2017-8850An issue was discovered on OnePlus One, X, 2, 3, and 3T devices.
- CVE-2017-8851An issue was discovered on OnePlus One and X devices.
- CVE-2017-8897Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has pre-auth reflected XSS in the IPS UTF8 Converter v1.1.18: admin/conve
- CVE-2017-8898Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has stored XSS in the Announcements, allowing privilege escalation from a
- CVE-2017-8899Invision Power Services (IPS) Community Suite 4.1.19.2 and earlier has a composite of Stored XSS and Information Disclosure issues in the at
- CVE-2016-7476The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Controller, PEM, PSM, and WebSafe 11.6.0 before 11.F5 Networks BIG-IP LTM, AAM, AFM, APM, ASM, GTM, Link Contr…
- CVE-2015-5436A potential security vulnerability has been identified with HP Integrated Lights-Out 4 (iLO 4) firmware version 2.11 and later, but prior toHP Integrated Lights-Out
- CVE-2016-2126Samba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of the PAC (Privilege Attribute Certificate)
- CVE-2016-9092The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1, and Mail Threat Defense (MTD) 1.1 management consoles are susceptible to a croSymantec Content Analysis · Symantec Mail Threat Defense
- CVE-2016-9097The Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6, ProxySG 6.6 prior to 6.6.5.8, and ProxySG 6.7 pSymantec Advanced Secure Gateway (ASG) and ProxySG
- CVE-2016-9099Symantec Advanced Secure Gateway (ASG) 6.6, ASG 6.7 prior to 6.7.2.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6, and ProxySG 6.7 prior to 6Symantec ASG · Symantec ProxySG
- CVE-2016-9100Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.13, ASG 6.7 prior to 6.7.3.1, ProxySG 6.5 prior to 6.5.10.6, ProxySG 6.6 prior to Symantec ASG · Symantec ProxySG
- CVE-2017-2681Specially crafted PROFINET DCP packets sent on a local Ethernet segment (Layer 2) to an affected product could cause a denial of service conSiemens Development/Evaluation Kits for PROFINET IO: DK… +93
- CVE-2017-6865A vulnerability has been identified in Primary Setup Tool (PST) (All versions < V4.2 HF1), SIMATIC Automation Tool (All versions < V3.0), SISiemens AG Primary Setup Tool · Siemens AG SIMATIC Auto… +15
- CVE-2017-6867A vulnerability was discovered in Siemens SIMATIC WinCC (V7.3 before Upd 11 and V7.4 before SP1), SIMATIC WinCC Runtime Professional (V13 beSiemens SIMATIC WinCC
- CVE-2017-2680Specially crafted PROFINET DCP broadcast packets could cause a denial of service condition of affected products on a local Ethernet segment Siemens Development/Evaluation Kits for PROFINET IO: D… +106
- CVE-2017-5461Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 aMozilla Thunderbird · Mozilla Firefox ESR +1
- CVE-2017-8798Integer signedness error in MiniUPnP MiniUPnPc v1.4.20101221 through v2.0 allows remote attackers to cause a denial of service or possibly h