CVEs published May 18, 2017
41 CVEs were published on May 18, 2017: 0 critical, 3 high.
- Published
- 41
- Critical
- 0
- High
- 3
- Medium
- 0
- Low
- 0
- Unrated
- 38
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- modx/revolution
- 5
- Cisco Policy Suite
- 1
- Cisco Prime Collaboration
- 1
- Cisco Prime Collaboration Provisioning
- 1
- Cisco TelePresence IX5000 Series
- 1
- McAfee ePolicy Orchestrator
- 1
- Micro Focus Vibe
- 1
- nokogiri
- 1
- Red Hat JBoss Enterprise Application Platform
- 1
High 3
- CVE-2017-9048libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a stack-based buffer overflow.
- CVE-2017-9049libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictComputeFastKey function in dict.c.
- CVE-2017-9050libxml2 20904-GITv2.9.4-16-g0741801 is vulnerable to a heap-based buffer over-read in the xmlDictAddString function in dict.c.nokogiri
Medium, low and unrated 38
- CVE-2017-3980A directory traversal vulnerability in the ePO Extension in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, and 5.1.3 and earlier allows remMcAfee ePolicy Orchestrator
- CVE-2017-6621A vulnerability in the web interface of Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to access senCisco Prime Collaboration
- CVE-2017-6622A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass auCisco Prime Collaboration Provisioning
- CVE-2017-6623A vulnerability in a script file that is installed as part of the Cisco Policy Suite (CPS) Software distribution for the CPS appliance couldCisco Policy Suite
- CVE-2017-6652A vulnerability in the web framework of the Cisco TelePresence IX5000 Series could allow an unauthenticated, remote attacker to access arbitCisco TelePresence IX5000 Series
- CVE-2017-9072Two CalendarXP products have XSS in common parts of HTML files.
- CVE-2017-9067In MODX Revolution before 2.5.7, when PHP 5.3.3 is used, an attacker is able to include and execute arbitrary files on the web server due tomodx/revolution
- CVE-2017-9068In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, amodx/revolution
- CVE-2017-9069In MODX Revolution before 2.5.7, a user with file upload permissions is able to execute arbitrary code by uploading a file with the name .htmodx/revolution
- CVE-2017-9070In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitlmodx/revolution
- CVE-2017-9071In MODX Revolution before 2.5.7, an attacker might be able to trigger XSS by injecting a payload into the HTTP Host header of a request.modx/revolution
- CVE-2017-7503It was found that the Red Hat JBoss EAP 7.0.5 implementation of javax.xml.transform.TransformerFactory is vulnerable to XXE.Red Hat JBoss Enterprise Application Platform
- CVE-2017-7433An absolute path traversal vulnerability (CWE-36) in Micro Focus Vibe 4.0.2 and earlier allows a remote authenticated attacker to download aMicro Focus Vibe
- CVE-2017-9061In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability exists when attempting to upload very large files, because the error m
- CVE-2017-9062In WordPress before 4.7.5, there is improper handling of post meta data values in the XML-RPC API.
- CVE-2017-9063In WordPress before 4.7.5, a cross-site scripting (XSS) vulnerability related to the Customizer exists, involving an invalid customization s
- CVE-2017-9064In WordPress before 4.7.5, a Cross Site Request Forgery (CSRF) vulnerability exists in the filesystem credentials dialog because a nonce is
- CVE-2017-9065In WordPress before 4.7.5, there is a lack of capability checks for post meta data in the XML-RPC API.
- CVE-2017-9066In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF.
- CVE-2017-6195Ipswitch MOVEit Transfer (formerly DMZ) allows pre-authentication blind SQL injection.
- CVE-2017-8338A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP pa
- CVE-2017-8769Facebook WhatsApp Messenger before 2.16.323 for Android uses the SD card for cleartext storage of files (Audio, Documents, Images, Video, an
- CVE-2017-9045The Google I/O 2017 application before 5.1.4 for Android downloads multiple .json files from http://storage.googleapis.com without SSL, whic
- CVE-2017-9047A buffer overflow was discovered in libxml2 20904-GITv2.9.4-16-g0741801.
- CVE-2017-9051libav before 12.1 is vulnerable to an invalid read of size 1 due to NULL pointer dereferencing in the nsv_read_chunk function in libavformat
- CVE-2017-9052An issue, also known as DW201703-006, was discovered in libdwarf 2017-03-21.
- CVE-2017-9053An issue, also known as DW201703-005, was discovered in libdwarf 2017-03-21.
- CVE-2017-9054An issue, also known as DW201703-002, was discovered in libdwarf 2017-03-21.
- CVE-2017-9055An issue, also known as DW201703-001, was discovered in libdwarf 2017-03-21.
- CVE-2017-9058In libytnef in ytnef through 1.9.2, there is a heap-based buffer over-read due to incorrect boundary checking in the SIZECHECK macro in lib/
- CVE-2017-9059The NFSv4 implementation in the Linux kernel through 4.11.1 allows local users to cause a denial of service (resource consumption) by levera
- CVE-2017-9038GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF
- CVE-2017-9039GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers
- CVE-2017-9040GNU Binutils 2017-04-03 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash), related to th
- CVE-2017-9041GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF
- CVE-2017-9042readelf.c in GNU Binutils 2017-04-12 has a "cannot be represented in type long" issue, which might allow remote attackers to cause a denial
- CVE-2017-9043readelf.c in GNU Binutils 2017-04-12 has a "shift exponent too large for type unsigned long" issue, which might allow remote attackers to ca
- CVE-2017-9044The print_symbol_for_build_attribute function in readelf.c in GNU Binutils 2017-04-12 allows remote attackers to cause a denial of service (