# CVEs published 2017-05-16

38 CVEs were published on May 16, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-7488](https://cve.now/CVE-2017-7488.md): Authconfig version 6.2.8 is vulnerable to an Information exposure while using SSSD to authenticate against remote server resulting in the le (no CVSS, authconfig)
- [CVE-2017-3825](https://cve.now/CVE-2017-3825.md): A vulnerability in the ICMP ingress packet processing of Cisco TelePresence Collaboration Endpoint (CE) Software could allow an unauthentica (no CVSS, Cisco TelePresence)
- [CVE-2017-3873](https://cve.now/CVE-2017-3873.md): A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Lightweight Ac (no CVSS, Cisco Aironet 1800, 2800, and 3800 Series Access Points)
- [CVE-2017-3876](https://cve.now/CVE-2017-3876.md): A vulnerability in the Event Management Service daemon (emsd) of Cisco IOS XR routers could allow an unauthenticated, remote attacker to cau (no CVSS, Cisco IOS XR)
- [CVE-2017-3882](https://cve.now/CVE-2017-3882.md): A vulnerability in the Universal Plug-and-Play (UPnP) implementation in the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticat (no CVSS, Cisco CVR100W Wireless-N VPN Router)
- [CVE-2017-6079](https://cve.now/CVE-2017-6079.md): The HTTP web-management application on Edgewater Networks Edgemarc appliances has a hidden page that allows for user-defined commands such a (no CVSS)
- [CVE-2017-6651](https://cve.now/CVE-2017-6651.md): A vulnerability in Cisco WebEx Meetings Server could allow unauthenticated, remote attackers to gain information that could allow them to ac (no CVSS, Cisco WebEx Meetings Server)
- [CVE-2017-6657](https://cve.now/CVE-2017-6657.md): Cisco Sourcefire Snort 3.0 before build 233 mishandles Ether Type Validation. (no CVSS, Snort 3.0 All versions prior to build 233.)
- [CVE-2017-6658](https://cve.now/CVE-2017-6658.md): Cisco Sourcefire Snort 3.0 before build 233 has a Buffer Overread related to use of a decoder array. (no CVSS, Snort 3.0 All versions prior to build 233.)
- [CVE-2017-7661](https://cve.now/CVE-2017-7661.md): Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. (no CVSS, Apache Software Foundation Apache CXF Fediz · org.apache… +2)
- [CVE-2017-7662](https://cve.now/CVE-2017-7662.md): Apache CXF Fediz ships with an OpenId Connect (OIDC) service which has a Client Registration Service, which is a simple web application that (no CVSS, Apache Software Foundation Apache CXF Fediz · org.apache.cx…)
- [CVE-2017-6885](https://cve.now/CVE-2017-6885.md): An error when handling certain external commands and services related to the FlexNet Inventory Agent and FlexNet Beacon of the Flexera Softw (no CVSS, Flexera Software FlexNet Manager Suite)
- [CVE-2017-6886](https://cve.now/CVE-2017-6886.md): An error within the "parse\_tiff\_ifd()" function (internal/dcraw\_common.cpp) in LibRaw versions before 0.18.2 can be exploited to corrupt mem (no CVSS, LibRaw)
- [CVE-2017-6887](https://cve.now/CVE-2017-6887.md): A boundary error within the "parse\_tiff\_ifd()" function (internal/dcraw\_common.cpp) in LibRaw versions before 0.18.2 can be exploited to cau (no CVSS, LibRaw)
- [CVE-2014-9931](https://cve.now/CVE-2014-9931.md): A buffer overflow vulnerability in all Android releases from CAF using the Linux kernel can potentially occur if an OEM performs an app regi (no CVSS, All Qualcomm Products)
- [CVE-2014-9932](https://cve.now/CVE-2014-9932.md): In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an impr (no CVSS, All Qualcomm Products)
- [CVE-2014-9933](https://cve.now/CVE-2014-9933.md): Due to missing input validation in all Android releases from CAF using the Linux kernel, HLOS can write to fuses for which it should not hav (no CVSS, All Qualcomm Products)
- [CVE-2014-9934](https://cve.now/CVE-2014-9934.md): A PKCS#1 v1.5 signature verification routine in all Android releases from CAF using the Linux kernel may not check padding. (no CVSS, All Qualcomm Products)
- [CVE-2014-9935](https://cve.now/CVE-2014-9935.md): In TrustZone an integer overflow vulnerability leading to a buffer overflow could potentially occur in a DRM routine in all Android releases (no CVSS, All Qualcomm Products)
- [CVE-2014-9936](https://cve.now/CVE-2014-9936.md): In TrustZone a time-of-check time-of-use race condition could potentially exist in an authentication routine in all Android releases from CA (no CVSS, All Qualcomm Products)
- [CVE-2014-9937](https://cve.now/CVE-2014-9937.md): In TrustZone a buffer overflow vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the Linux kernel. (no CVSS, All Qualcomm Products)
- [CVE-2015-8995](https://cve.now/CVE-2015-8995.md): In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. (no CVSS, All Qualcomm Products)
- [CVE-2015-8996](https://cve.now/CVE-2015-8996.md): In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM routine in all Android releases from CAF using t (no CVSS, All Qualcomm Products)
- [CVE-2015-8997](https://cve.now/CVE-2015-8997.md): In TrustZone a time-of-check time-of-use race condition could potentially exist in a listener routine in all Android releases from CAF using (no CVSS, All Qualcomm Products)
- [CVE-2015-8998](https://cve.now/CVE-2015-8998.md): In TrustZone an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. (no CVSS, All Qualcomm Products)
- [CVE-2015-8999](https://cve.now/CVE-2015-8999.md): In TrustZone a buffer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel while loading an (no CVSS, All Qualcomm Products)
- [CVE-2015-9000](https://cve.now/CVE-2015-9000.md): In TrustZone an untrusted pointer dereference vulnerability can potentially occur in a DRM routine in all Android releases from CAF using th (no CVSS, All Qualcomm Products)
- [CVE-2015-9001](https://cve.now/CVE-2015-9001.md): In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linux kernel. (no CVSS, All Qualcomm Products)
- [CVE-2015-9002](https://cve.now/CVE-2015-9002.md): In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases from CAF using the (no CVSS, All Qualcomm Products)
- [CVE-2015-9003](https://cve.now/CVE-2015-9003.md): In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel. (no CVSS, All Qualcomm Products)
- [CVE-2016-10237](https://cve.now/CVE-2016-10237.md): If shared content protection memory were passed as the secure camera memory buffer by the HLOS to a trusted application (TA) in all Android (no CVSS, All Qualcomm Products)
- [CVE-2016-10238](https://cve.now/CVE-2016-10238.md): In QSEE in all Android releases from CAF using the Linux kernel access control may potentially be bypassed due to a page alignment issue. (no CVSS, All Qualcomm Products)
- [CVE-2016-10239](https://cve.now/CVE-2016-10239.md): In TrustZone access control policy may potentially be bypassed in all Android releases from CAF using the Linux kernel due to improper input (no CVSS, All Qualcomm Products)
- [CVE-2016-10242](https://cve.now/CVE-2016-10242.md): A time-of-check time-of-use race condition could potentially exist in the secure file system in all Android releases from CAF using the Linu (no CVSS, All Qualcomm Products)
- [CVE-2016-10372](https://cve.now/CVE-2016-10372.md): The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP port (no CVSS)
- [CVE-2017-7952](https://cve.now/CVE-2017-7952.md): INFOR EAM V11.0 Build 201410 has SQL injection via search fields, related to the filtervalue parameter. (no CVSS)
- [CVE-2017-7953](https://cve.now/CVE-2017-7953.md): INFOR EAM V11.0 Build 201410 has XSS via comment fields. (no CVSS)
- [CVE-2017-8382](https://cve.now/CVE-2017-8382.md): admidio 3.2.8 has CSRF in adm\_program/modules/members/members\_function.php with an impact of deleting arbitrary user accounts. (no CVSS, admidio/admidio)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-05-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.