CVEs published May 16, 2017
38 CVEs were published on May 16, 2017: 0 critical, 0 high.
- Published
- 38
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 38
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- All Qualcomm Products
- 20
- LibRaw
- 2
- Snort 3.0 All versions prior to build 233.
- 2
- admidio/admidio
- 1
- Apache Software Foundation Apache CXF Fediz · org.apache… +2
- 1
- Apache Software Foundation Apache CXF Fediz · org.apache.cx…
- 1
- authconfig
- 1
- Cisco Aironet 1800, 2800, and 3800 Series Access Points
- 1
- Cisco CVR100W Wireless-N VPN Router
- 1
- Cisco IOS XR
- 1
Medium, low and unrated 38
- CVE-2017-7488Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the leauthconfig
- CVE-2017-3825A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an unauthenticaCisco TelePresence
- CVE-2017-3873A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight AcCisco Aironet 1800, 2800, and 3800 Series Access Points
- CVE-2017-3876A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cauCisco IOS XR
- CVE-2017-3882A vulnerability in the Universal Plug-and-Play (UPnP) implementation in the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticatCisco CVR100W Wireless-N VPN Router
- CVE-2017-6079The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such a
- CVE-2017-6651A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that could allow them to acCisco WebEx Meetings Server
- CVE-2017-6657Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation.Snort 3.0 All versions prior to build 233.
- CVE-2017-6658Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array.Snort 3.0 All versions prior to build 233.
- CVE-2017-7661Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications.Apache Software Foundation Apache CXF Fediz · org.apache… +2
- CVE-2017-7662Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple web application thatApache Software Foundation Apache CXF Fediz · org.apache.cx…
- CVE-2017-6885An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera SoftwFlexera Software FlexNet Manager Suite
- CVE-2017-6886An error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt memLibRaw
- CVE-2017-6887A boundary error within the "parse_tiff_ifd()" function (internal/dcraw_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cauLibRaw
- CVE-2014-9931A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app regiAll Qualcomm Products
- CVE-2014-9932In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an imprAll Qualcomm Products
- CVE-2014-9933Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not havAll Qualcomm Products
- CVE-2014-9934A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding.All Qualcomm Products
- CVE-2014-9935In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releasesAll Qualcomm Products
- CVE-2014-9936In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CAAll Qualcomm Products
- CVE-2014-9937In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel.All Qualcomm Products
- CVE-2015-8995In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.All Qualcomm Products
- CVE-2015-8996In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using tAll Qualcomm Products
- CVE-2015-8997In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF usingAll Qualcomm Products
- CVE-2015-8998In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.All Qualcomm Products
- CVE-2015-8999In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an All Qualcomm Products
- CVE-2015-9000In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using thAll Qualcomm Products
- CVE-2015-9001In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel.All Qualcomm Products
- CVE-2015-9002In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the All Qualcomm Products
- CVE-2015-9003In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel.All Qualcomm Products
- CVE-2016-10237If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android All Qualcomm Products
- CVE-2016-10238In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue.All Qualcomm Products
- CVE-2016-10239In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper inputAll Qualcomm Products
- CVE-2016-10242A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the LinuAll Qualcomm Products
- CVE-2016-10372The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP port
- CVE-2017-7952INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter.
- CVE-2017-7953INFOR EAM V11.0 Build 201410 has XSS via comment fields.
- CVE-2017-8382admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user accounts.admidio/admidio