CVEs published May 22, 2017
127 CVEs were published on May 22, 2017: 0 critical, 0 high.
- Published
- 127
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 127
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Cisco Remote Expert Manager
- 7
- Cisco Prime Collaboration Provisioning
- 3
- INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Empiri…
- 3
- Olive Design WP-OliveCart · Olive Design WP-OliveCartPro
- 3
- Cisco Nexus Series Switches
- 2
- Toshiba FlashAirTM SDHC Memory Card
- 2
- VMware Workstation Pro/Player
- 2
- Apache Software Foundation Apache Archiva · org.apache.arch…
- 1
- BestWebSoft Captcha · BestWebSoft Car Rental +48
- 1
- Cisco FirePOWER System Software
- 1
Medium, low and unrated 127
- CVE-2017-9150The do_check function in kernel/bpf/verifier.c in the Linux kernel before 4.11.1 does not make the allow_ptr_leaks value available for restr
- CVE-2016-6112IBM Distributed Marketing and Marketing Platform 8.6, 9.0, 9.1, and 10.0 could allow an authenticated user to escalate their privileges and IBM Marketing Platform
- CVE-2017-1092IBM Informix Open Admin Tool 11.5, 11.7, and 12.1 could allow an unauthorized user to execute arbitrary code as system admin on Windows servIBM Informix Servers
- CVE-2017-1159IBM Business Process Manager 8.0 and 8.5 could allow a remote attacker to conduct phishing attacks, using an open redirect attack.IBM Business Process Manager Advanced
- CVE-2017-1282IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting.IBM Content Navigator
- CVE-2017-1289IBM SDK, Java Technology Edition is vulnerable XML External Entity Injection (XXE) error when processing XML data.IBM Runtimes for Java Technology
- CVE-2017-1320IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting.IBM Tivoli Federated Identity Manager
- CVE-2017-6891Two errors in the "asn1_find_node()" function (lib/parser_aux.c) within GnuTLS libtasn1 version 4.10 can be exploited to cause a stacked-basFlexera Software GnuTLS libtasn1
- CVE-2017-9149Metadata Anonymisation Toolkit (MAT) 0.6 and 0.6.1 silently fails to perform "Clean metadata" actions upon invocation from the Nautilus cont
- CVE-2017-5657Several REST service endpoints of Apache Archiva are not protected against Cross Site Request Forgery (CSRF) attacks.Apache Software Foundation Apache Archiva · org.apache.arch…
- CVE-2017-9146The TNEFFillMapi function in lib/ytnef.c in libytnef in ytnef through 1.9.2 does not ensure a nonzero count value before a certain memory al
- CVE-2017-9147LibTIFF 4.0.7 has an invalid read in the _TIFFVGetField function in tif_dir.c, which might allow remote attackers to cause a denial of servi
- CVE-2016-4854Cross-site request forgery (CSRF) vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authenticationNTT DOCOMO L-04D
- CVE-2016-4863The Toshiba FlashAir SD-WD/WC series Class 6 model with firmware version 1.00.04 and later, FlashAir SD-WD/WC series Class 10 model W-02 witToshiba FlashAir SD-WD/WC series Class 6 model · Toshiba… +6
- CVE-2016-4900Untrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote attackers to gain privileges via a Trojan hoEvernote for Windows
- CVE-2016-4901Untrusted search path vulnerability in The installer of e-Tax Software all versions allows remote attackers to gain privileges via a Trojan National Tax Agency The installer of e-Tax Software
- CVE-2016-4903Cross-site scripting vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackeOlive Design WP-OliveCart · Olive Design WP-OliveCartPro
- CVE-2016-4904Cross-site request forgery (CSRF) vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows rOlive Design WP-OliveCart · Olive Design WP-OliveCartPro
- CVE-2016-4905SQL injection vulnerability in the WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows attackers with adOlive Design WP-OliveCart · Olive Design WP-OliveCartPro
- CVE-2016-7804Untrusted search path vulnerability in 7 Zip for Windows 16.02 and earlier allows remote attackers to gain privileges via a Trojan horse DLLIgor Pavlov 7 Zip for Windows
- CVE-2017-2161FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 andToshiba FlashAirTM SDHC Memory Card
- CVE-2017-2162FlashAirTM SDHC Memory Card (SD-WE Series <W-03>) V3.00.02 and earlier and FlashAirTM SDHC Memory Card (SD-WD/WC Series <W-02>) V2.00.04 andToshiba FlashAirTM SDHC Memory Card
- CVE-2017-2168Cross-site scripting vulnerability in WP Booking System Free version prior to version 1.4 and WP Booking System Premium version prior to verWP Booking System Free version · WP Booking System Premium…
- CVE-2017-2169Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to iMax Foundry MaxButtons
- CVE-2017-2171Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to versionBestWebSoft Captcha · BestWebSoft Car Rental +48
- CVE-2017-2173Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote authenticated attackers to inject arbiINFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Empiri…
- CVE-2017-2174Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to inject arbitrary web scriINFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Empiri…
- CVE-2017-2175Untrusted search path vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to gain privileges via a TrINFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN (IPA) Empiri…
- CVE-2017-4915VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files.VMware Workstation Pro/Player
- CVE-2017-4916VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver.VMware Workstation Pro/Player
- CVE-2017-9141In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the ResetImageProfileIterator function in MagickCore/profil
- CVE-2017-9142In ImageMagick 7.0.5-7 Q16, a crafted file could trigger an assertion failure in the WriteBlob function in MagickCore/blob.c because of miss
- CVE-2017-9143In ImageMagick 7.0.5-5, the ReadARTImage function in coders/art.c allows attackers to cause a denial of service (memory leak) via a crafted
- CVE-2017-9144In ImageMagick 7.0.5-5, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c.
- CVE-2017-2494An issue was discovered in certain Apple products.
- CVE-2017-2495An issue was discovered in certain Apple products.
- CVE-2017-2496An issue was discovered in certain Apple products.
- CVE-2017-2497An issue was discovered in certain Apple products.
- CVE-2017-2498An issue was discovered in certain Apple products.
- CVE-2017-2499An issue was discovered in certain Apple products.
- CVE-2017-2500An issue was discovered in certain Apple products.
- CVE-2017-2501An issue was discovered in certain Apple products.
- CVE-2017-2502An issue was discovered in certain Apple products.
- CVE-2017-2503An issue was discovered in certain Apple products.
- CVE-2017-2504An issue was discovered in certain Apple products.
- CVE-2017-2505An issue was discovered in certain Apple products.
- CVE-2017-2506An issue was discovered in certain Apple products.
- CVE-2017-2507An issue was discovered in certain Apple products.
- CVE-2017-2508An issue was discovered in certain Apple products.
- CVE-2017-2509An issue was discovered in certain Apple products.
- CVE-2017-2510An issue was discovered in certain Apple products.
- CVE-2017-2511An issue was discovered in certain Apple products.
- CVE-2017-2512An issue was discovered in certain Apple products.
- CVE-2017-2513An issue was discovered in certain Apple products.
- CVE-2017-2514An issue was discovered in certain Apple products.
- CVE-2017-2515An issue was discovered in certain Apple products.
- CVE-2017-2516An issue was discovered in certain Apple products.
- CVE-2017-2518An issue was discovered in certain Apple products.
- CVE-2017-2519An issue was discovered in certain Apple products.
- CVE-2017-2520An issue was discovered in certain Apple products.
- CVE-2017-2521An issue was discovered in certain Apple products.
- CVE-2017-2522An issue was discovered in certain Apple products.
- CVE-2017-2523An issue was discovered in certain Apple products.
- CVE-2017-2524An issue was discovered in certain Apple products.
- CVE-2017-2525An issue was discovered in certain Apple products.
- CVE-2017-2526An issue was discovered in certain Apple products.
- CVE-2017-2527An issue was discovered in certain Apple products.
- CVE-2017-2528An issue was discovered in certain Apple products.
- CVE-2017-2530An issue was discovered in certain Apple products.
- CVE-2017-2531An issue was discovered in certain Apple products.
- CVE-2017-2533An issue was discovered in certain Apple products.
- CVE-2017-2534An issue was discovered in certain Apple products.
- CVE-2017-2535An issue was discovered in certain Apple products.
- CVE-2017-2536An issue was discovered in certain Apple products.
- CVE-2017-2537An issue was discovered in certain Apple products.
- CVE-2017-2538An issue was discovered in certain Apple products.
- CVE-2017-2539An issue was discovered in certain Apple products.
- CVE-2017-2540An issue was discovered in certain Apple products.
- CVE-2017-2541An issue was discovered in certain Apple products.
- CVE-2017-2542An issue was discovered in certain Apple products.
- CVE-2017-2543An issue was discovered in certain Apple products.
- CVE-2017-2544An issue was discovered in certain Apple products.
- CVE-2017-2545An issue was discovered in certain Apple products.
- CVE-2017-2546An issue was discovered in certain Apple products.
- CVE-2017-2547An issue was discovered in certain Apple products.
- CVE-2017-2548An issue was discovered in certain Apple products.
- CVE-2017-2549An issue was discovered in certain Apple products.
- CVE-2017-6977An issue was discovered in certain Apple products.
- CVE-2017-6978An issue was discovered in certain Apple products.
- CVE-2017-6979An issue was discovered in certain Apple products.
- CVE-2017-6980An issue was discovered in certain Apple products.
- CVE-2017-6981An issue was discovered in certain Apple products.
- CVE-2017-6982An issue was discovered in certain Apple products.
- CVE-2017-6983An issue was discovered in certain Apple products.
- CVE-2017-6984An issue was discovered in certain Apple products.
- CVE-2017-6985An issue was discovered in certain Apple products.
- CVE-2017-6986An issue was discovered in certain Apple products.
- CVE-2017-6987An issue was discovered in certain Apple products.
- CVE-2017-6988An issue was discovered in certain Apple products.
- CVE-2017-6989An issue was discovered in certain Apple products.
- CVE-2017-6990An issue was discovered in certain Apple products.
- CVE-2017-6991An issue was discovered in certain Apple products.
- CVE-2017-6994An issue was discovered in certain Apple products.
- CVE-2017-6995An issue was discovered in certain Apple products.
- CVE-2017-6996An issue was discovered in certain Apple products.
- CVE-2017-6997An issue was discovered in certain Apple products.
- CVE-2017-6998An issue was discovered in certain Apple products.
- CVE-2017-6999An issue was discovered in certain Apple products.
- CVE-2017-9140Cross-site scripting (XSS) vulnerability in Telerik.ReportViewer.WebForms.dll in Telerik Reporting for ASP.NET WebForms Report Viewer contro
- CVE-2017-6630A vulnerability in the Session Initiation Protocol (SIP) implementation of Cisco IP Phone 8851 11.0(0.1) could allow an unauthenticated, remCisco IP Phone
- CVE-2017-6632A vulnerability in the logging configuration of Secure Sockets Layer (SSL) policies for Cisco FirePOWER System Software 5.3.0 through 6.2.2 Cisco FirePOWER System Software
- CVE-2017-6633A vulnerability in the TCP throttling process of Cisco UCS C-Series Rack Servers 3.0(0.234) could allow an unauthenticated, remote attacker Cisco UCS C-Series Rack Servers
- CVE-2017-6634A vulnerability in the Device Manager web interface of Cisco Industrial Ethernet 1000 Series Switches 1.3 could allow an unauthenticated, reCisco Industrial Ethernet 1000 Series Switches
- CVE-2017-6635A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 12.1) could allow an authenticatedCisco Prime Collaboration Provisioning
- CVE-2017-6636A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticatedCisco Prime Collaboration Provisioning
- CVE-2017-6637A vulnerability in the web interface of Cisco Prime Collaboration Provisioning Software (prior to Release 11.1) could allow an authenticatedCisco Prime Collaboration Provisioning
- CVE-2017-6641A vulnerability in the TCP connection handling functionality of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, Cisco Remote Expert Manager
- CVE-2017-6642A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to accesCisco Remote Expert Manager
- CVE-2017-6643A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to accesCisco Remote Expert Manager
- CVE-2017-6644A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to accesCisco Remote Expert Manager
- CVE-2017-6645A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to accesCisco Remote Expert Manager
- CVE-2017-6646A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to accesCisco Remote Expert Manager
- CVE-2017-6647A vulnerability in the web interface of Cisco Remote Expert Manager Software 11.0.0 could allow an unauthenticated, remote attacker to accesCisco Remote Expert Manager
- CVE-2017-6649A vulnerability in the CLI of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow an authenticateCisco Nexus Series Switches
- CVE-2017-6650A vulnerability in the Telnet CLI command of Cisco NX-OS System Software 7.1 through 7.3 running on Cisco Nexus Series Switches could allow Cisco Nexus Series Switches
- CVE-2017-6653A vulnerability in the TCP throttling process for the GUI of the Cisco Identity Services Engine (ISE) 2.1(0.474) could allow an unauthenticaCisco Identity Services Engine
- CVE-2017-6654A vulnerability in the web-based management interface of Cisco Unified Communications Manager 10.5 through 11.5 could allow an unauthenticatCisco Unified Communications Manager