# CVEs published 2017-05-23

117 CVEs were published on May 23, 2017: 0 critical, 5 high. Days are UTC.

- [CVE-2017-8310](https://cve.now/CVE-2017-8310.md): Heap out-of-bound read in CreateHtmlSubtitle in VideoLAN VLC 2.2.x due to missing check of string termination allows attackers to read data (no CVSS, VideoLAN VLC)
- [CVE-2017-8311](https://cve.now/CVE-2017-8311.md): Potential heap based buffer overflow in ParseJSS in VideoLAN VLC before 2.2.5 due to skipping NULL terminator in an input string allows atta (no CVSS, VideoLAN VLC)
- [CVE-2017-8312](https://cve.now/CVE-2017-8312.md): Heap out-of-bound read in ParseJSS in VideoLAN VLC due to missing check of string length allows attackers to read heap uninitialized data vi (no CVSS, VideoLAN VLC)
- [CVE-2017-8313](https://cve.now/CVE-2017-8313.md): Heap out-of-bound read in ParseJSS in VideoLAN VLC before 2.2.5 due to missing check of string termination allows attackers to read data bey (no CVSS, VideoLAN VLC)
- [CVE-2017-8314](https://cve.now/CVE-2017-8314.md): Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subti (no CVSS, XBMC Foundation Kodi)
- [CVE-2017-0373](https://cve.now/CVE-2017-0373.md): The gen\_class\_pod implementation in lib/Config/Model/Utils/GenClassPod.pm in Config-Model (aka libconfig-model-perl) before 2.102 has a dang (no CVSS, libconfig-model-perl)
- [CVE-2017-0374](https://cve.now/CVE-2017-0374.md): lib/Config/Model.pm in Config-Model (aka libconfig-model-perl) before 2.102 allows local users to gain privileges via a crafted model in the (no CVSS, libconfig-model-perl)
- [CVE-2017-3128](https://cve.now/CVE-2017-3128.md): A stored XSS (Cross-Site-Scripting) vulnerability in Fortinet FortiOS allows attackers to execute unauthorized code or commands via the poli (no CVSS, Fortinet FortiOS)
- [CVE-2017-9214](https://cve.now/CVE-2017-9214.md): In Open vSwitch (OvS) 2.7.0, while parsing an OFPT\_QUEUE\_GET\_CONFIG\_REPLY type OFP 1.0 message, there is a buffer over-read that is caused b (no CVSS)
- [CVE-2017-2783](https://cve.now/CVE-2017-2783.md): An exploitable heap corruption vulnerability exists in the FillRowFormat functionality of Antenna House DMC HTMLFilter that is shipped with (CVSS 8.3, Antenna House DMC HTMLFilter)
- [CVE-2017-2793](https://cve.now/CVE-2017-2793.md): An exploitable heap corruption vulnerability exists in the UnCompressUnicode functionality of Antenna House DMC HTMLFilter used by MarkLogic (CVSS 8.3, Antenna House DMC HTMLFilter)
- [CVE-2017-2794](https://cve.now/CVE-2017-2794.md): An exploitable stack-based buffer overflow vulnerability exists in the DHFSummary functionality of AntennaHouse DMC HTMLFilter as used by Ma (CVSS 8.3, Antenna House DMC HTMLFilter)
- [CVE-2017-2797](https://cve.now/CVE-2017-2797.md): An exploitable heap overflow vulnerability exists in the ParseEnvironment functionality of AntennaHouse DMC HTMLFilter as used by MarkLogic (CVSS 8.3, Antenna House DMC HTMLFilter)
- [CVE-2017-6131](https://cve.now/CVE-2017-6131.md): In some circumstances, an F5 BIG-IP version 12.0.0 to 12.1.2 and 13.0.0 Azure cloud instance may contain a default administrative password w (no CVSS, F5 Networks BIG-IP Azure cloud instance)
- [CVE-2017-9212](https://cve.now/CVE-2017-9212.md): The Bluetooth stack on the BMW 330i 2011 allows a remote crash of the CD/Multimedia software via %x or %c format string specifiers in a devi (no CVSS)
- [CVE-2017-5965](https://cve.now/CVE-2017-5965.md): The package manager in Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to execute arbitrary ASP code by creating a ZI (no CVSS)
- [CVE-2017-5966](https://cve.now/CVE-2017-5966.md): Sitecore CRM 8.1 Rev 151207 allows remote authenticated administrators to read arbitrary files via an absolute path traversal attack on site (no CVSS)
- [CVE-2017-9211](https://cve.now/CVE-2017-9211.md): The crypto\_skcipher\_init\_tfm function in crypto/skcipher.c in the Linux kernel through 4.11.2 relies on a setkey function that lacks a key-s (no CVSS)
- [CVE-2015-1529](https://cve.now/CVE-2015-1529.md): Integer overflow in soundtrigger/ISoundTriggerHwService.cpp in Android allows attacks to cause a denial of service via unspecified vectors. (no CVSS)
- [CVE-2015-4045](https://cve.now/CVE-2015-4045.md): The sudoers file in the asset discovery scanner in AlienVault OSSIM before 5.0.1 allows local users to gain privileges via a crafted nmap sc (no CVSS)
- [CVE-2015-4046](https://cve.now/CVE-2015-4046.md): The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbitrary commands via the assets (no CVSS)
- [CVE-2015-4054](https://cve.now/CVE-2015-4054.md): PgBouncer before 1.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by sending a password packe (no CVSS)
- [CVE-2015-4455](https://cve.now/CVE-2015-4455.md): Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin 3.0 beta for WordPr (no CVSS)
- [CVE-2015-4704](https://cve.now/CVE-2015-4704.md): Directory traversal vulnerability in the Download Zip Attachments plugin 1.0 for WordPress allows remote attackers to read arbitrary files v (no CVSS)
- [CVE-2015-5381](https://cve.now/CVE-2015-5381.md): Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to in (no CVSS)
- [CVE-2015-5382](https://cve.now/CVE-2015-5382.md): program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated users to read arbit (no CVSS)
- [CVE-2015-5383](https://cve.now/CVE-2015-5383.md): Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by reading files in the (1) config, (2) temp, o (no CVSS)
- [CVE-2015-5401](https://cve.now/CVE-2015-5401.md): Teradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15.00.02.08\_Sles10 and 15.00.02.08\_Sles11 allow (no CVSS)
- [CVE-2015-5468](https://cve.now/CVE-2015-5468.md): Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attackers to read arbitrar (no CVSS)
- [CVE-2015-5469](https://cve.now/CVE-2015-5469.md): Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers to read arbitrary fil (no CVSS)
- [CVE-2015-5609](https://cve.now/CVE-2015-5609.md): Absolute path traversal vulnerability in the Image Export plugin 1.1 for WordPress allows remote attackers to read and delete arbitrary file (no CVSS)
- [CVE-2015-5682](https://cve.now/CVE-2015-5682.md): upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via vectors related to (no CVSS)
- [CVE-2015-6586](https://cve.now/CVE-2015-6586.md): The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sen (no CVSS)
- [CVE-2015-6817](https://cve.now/CVE-2015-6817.md): PgBouncer 1.6.x before 1.6.1, when configured with auth\_user, allows remote attackers to gain login access as auth\_user via an unknown usern (no CVSS)
- [CVE-2015-8089](https://cve.now/CVE-2015-8089.md): The GPU driver in Huawei P7 phones with software P7-L00 before P7-L00C17B851, P7-L05 before P7-L05C00B851, and P7-L09 before P7-L09C92B851 a (no CVSS)
- [CVE-2015-8477](https://cve.now/CVE-2015-8477.md): Cross-site scripting (XSS) vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script or HTML via vectors (no CVSS)
- [CVE-2016-10073](https://cve.now/CVE-2016-10073.md): The from method in library/core/class.email.php in Vanilla Forums before 2.3.1 allows remote attackers to spoof the email domain in sent mes (no CVSS)
- [CVE-2016-1876](https://cve.now/CVE-2016-1876.md): The backend service process in Lenovo Solution Center (aka LSC) before 3.3.0002 allows local users to gain SYSTEM privileges via unspecified (no CVSS)
- [CVE-2016-5177](https://cve.now/CVE-2016-5177.md): Use-after-free vulnerability in V8 in Google Chrome before 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or pos (no CVSS)
- [CVE-2016-5178](https://cve.now/CVE-2016-5178.md): Multiple unspecified vulnerabilities in Google Chrome before 53.0.2785.143 allow remote attackers to cause a denial of service or possibly h (no CVSS)
- [CVE-2016-5735](https://cve.now/CVE-2016-5735.md): Integer overflow in the rwpng\_read\_image24\_libpng function in rwpng.c in pngquant 2.7.0 allows remote attackers to have unspecified impact v (no CVSS)
- [CVE-2016-7977](https://cve.now/CVE-2016-7977.md): Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently read arbitrary files via (no CVSS)
- [CVE-2016-7978](https://cve.now/CVE-2016-7978.md): Use-after-free vulnerability in Ghostscript 9.20 might allow remote attackers to execute arbitrary code via vectors related to a reference l (no CVSS)
- [CVE-2016-7979](https://cve.now/CVE-2016-7979.md): Ghostscript before 9.21 might allow remote attackers to bypass the SAFER mode protection mechanism and consequently execute arbitrary code b (no CVSS)
- [CVE-2016-9840](https://cve.now/CVE-2016-9840.md): inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. (no CVSS)
- [CVE-2016-9841](https://cve.now/CVE-2016-9841.md): inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic. (no CVSS)
- [CVE-2016-9842](https://cve.now/CVE-2016-9842.md): The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving (CVSS 8.8)
- [CVE-2016-9843](https://cve.now/CVE-2016-9843.md): The crc32\_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big (no CVSS)
- [CVE-2017-5870](https://cve.now/CVE-2017-5870.md): Multiple cross-site scripting (XSS) vulnerabilities in ViMbAdmin 3.0.15 allow remote attackers to inject arbitrary web script or HTML via th (no CVSS, opensolutions/vimbadmin)
- [CVE-2017-6813](https://cve.now/CVE-2017-6813.md): A service provided by Zimbra Collaboration Suite (ZCS) before 8.7.6 fails to require needed privileges before performing a few requested ope (no CVSS)
- [CVE-2017-6821](https://cve.now/CVE-2017-6821.md): Directory traversal vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.7.6 allows attackers to have unspecified impact via unkno (no CVSS)
- [CVE-2017-7288](https://cve.now/CVE-2017-7288.md): Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (ZCS) before 8.7.1 allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2017-8309](https://cve.now/CVE-2017-8309.md): Memory leak in the audio/audio.c in QEMU (aka Quick Emulator) allows remote attackers to cause a denial of service (memory consumption) by r (no CVSS)
- [CVE-2017-8379](https://cve.now/CVE-2017-8379.md): Memory leak in the keyboard input event handlers support in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a deni (no CVSS)
- [CVE-2017-8913](https://cve.now/CVE-2017-8913.md): The Visual Composer VC70RUNTIME component in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE (no CVSS)
- [CVE-2017-8914](https://cve.now/CVE-2017-8914.md): sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insec (no CVSS)
- [CVE-2017-8915](https://cve.now/CVE-2017-8915.md): sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to cause a denial of service (assertion failure and service crash) by (no CVSS)
- [CVE-2017-9151](https://cve.now/CVE-2017-9151.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm\_load\_ascii function in input-pnm.c:303:12. (no CVSS)
- [CVE-2017-9152](https://cve.now/CVE-2017-9152.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the pnm\_load\_raw function in input-pnm.c:346:41. (no CVSS)
- [CVE-2017-9153](https://cve.now/CVE-2017-9153.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnm\_load\_rawpbm function in input-pnm.c:391:13. (no CVSS)
- [CVE-2017-9154](https://cve.now/CVE-2017-9154.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the GET\_COLOR fu (no CVSS)
- [CVE-2017-9155](https://cve.now/CVE-2017-9155.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the input\_pnm\_re (no CVSS)
- [CVE-2017-9156](https://cve.now/CVE-2017-9156.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm\_load\_as (no CVSS)
- [CVE-2017-9157](https://cve.now/CVE-2017-9157.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm\_load\_as (no CVSS)
- [CVE-2017-9158](https://cve.now/CVE-2017-9158.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm\_load\_ra (no CVSS)
- [CVE-2017-9159](https://cve.now/CVE-2017-9159.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the pnm\_load\_ra (no CVSS)
- [CVE-2017-9160](https://cve.now/CVE-2017-9160.md): libautotrace.a in AutoTrace 0.31.1 has a stack-based buffer overflow in the pnmscanner\_gettoken function in input-pnm.c:458:12. (no CVSS)
- [CVE-2017-9161](https://cve.now/CVE-2017-9161.md): libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:188:23. (no CVSS)
- [CVE-2017-9162](https://cve.now/CVE-2017-9162.md): libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:191:2. (no CVSS)
- [CVE-2017-9163](https://cve.now/CVE-2017-9163.md): libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in pxl-outline.c:106:54. (no CVSS)
- [CVE-2017-9164](https://cve.now/CVE-2017-9164.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET\_COLOR function in color.c:16:11. (no CVSS)
- [CVE-2017-9165](https://cve.now/CVE-2017-9165.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET\_COLOR function in color.c:17:11. (no CVSS)
- [CVE-2017-9166](https://cve.now/CVE-2017-9166.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GET\_COLOR function in color.c:18:11. (no CVSS)
- [CVE-2017-9167](https://cve.now/CVE-2017-9167.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:337:25. (no CVSS)
- [CVE-2017-9168](https://cve.now/CVE-2017-9168.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:353:25. (no CVSS)
- [CVE-2017-9169](https://cve.now/CVE-2017-9169.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:355:25. (no CVSS)
- [CVE-2017-9170](https://cve.now/CVE-2017-9170.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:370:25. (no CVSS)
- [CVE-2017-9171](https://cve.now/CVE-2017-9171.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-bmp.c:492:24. (no CVSS)
- [CVE-2017-9172](https://cve.now/CVE-2017-9172.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:496:29. (no CVSS)
- [CVE-2017-9173](https://cve.now/CVE-2017-9173.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:497:29. (no CVSS)
- [CVE-2017-9174](https://cve.now/CVE-2017-9174.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the GET\_COLOR fu (no CVSS)
- [CVE-2017-9175](https://cve.now/CVE-2017-9175.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage f (no CVSS)
- [CVE-2017-9176](https://cve.now/CVE-2017-9176.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage f (no CVSS)
- [CVE-2017-9177](https://cve.now/CVE-2017-9177.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage fu (no CVSS)
- [CVE-2017-9178](https://cve.now/CVE-2017-9178.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage f (no CVSS)
- [CVE-2017-9179](https://cve.now/CVE-2017-9179.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage fu (no CVSS)
- [CVE-2017-9180](https://cve.now/CVE-2017-9180.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and SEGV), related to the ReadImage fu (no CVSS)
- [CVE-2017-9181](https://cve.now/CVE-2017-9181.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid write and SEGV), related to the ReadImage f (no CVSS)
- [CVE-2017-9182](https://cve.now/CVE-2017-9182.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (use-after-free and invalid heap read), related to t (no CVSS)
- [CVE-2017-9183](https://cve.now/CVE-2017-9183.md): libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:309:7. (no CVSS)
- [CVE-2017-9184](https://cve.now/CVE-2017-9184.md): libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:314:7. (no CVSS)
- [CVE-2017-9185](https://cve.now/CVE-2017-9185.md): libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:319:7. (no CVSS)
- [CVE-2017-9186](https://cve.now/CVE-2017-9186.md): libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:326:17. (no CVSS)
- [CVE-2017-9187](https://cve.now/CVE-2017-9187.md): libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-bmp.c:486:7. (no CVSS)
- [CVE-2017-9188](https://cve.now/CVE-2017-9188.md): libautotrace.a in AutoTrace 0.31.1 has a "left shift ... (no CVSS)
- [CVE-2017-9189](https://cve.now/CVE-2017-9189.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid read and application crash), related to the (no CVSS)
- [CVE-2017-9190](https://cve.now/CVE-2017-9190.md): libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service (invalid free), related to the free\_bitmap function (no CVSS)
- [CVE-2017-9191](https://cve.now/CVE-2017-9191.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the rle\_fread function in input-tga.c:252:15. (no CVSS)
- [CVE-2017-9192](https://cve.now/CVE-2017-9192.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-tga.c:528:7. (no CVSS)
- [CVE-2017-9193](https://cve.now/CVE-2017-9193.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:538:33. (no CVSS)
- [CVE-2017-9194](https://cve.now/CVE-2017-9194.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:559:29. (no CVSS)
- [CVE-2017-9195](https://cve.now/CVE-2017-9195.md): libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:620:27. (no CVSS)
- [CVE-2017-9196](https://cve.now/CVE-2017-9196.md): libautotrace.a in AutoTrace 0.31.1 has a "negative-size-param" issue in the ReadImage function in input-tga.c:528:7. (no CVSS)
- [CVE-2017-9197](https://cve.now/CVE-2017-9197.md): libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:498:55. (no CVSS)
- [CVE-2017-9198](https://cve.now/CVE-2017-9198.md): libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:508:18. (no CVSS)
- [CVE-2017-9199](https://cve.now/CVE-2017-9199.md): libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:192:19. (no CVSS)
- [CVE-2017-9200](https://cve.now/CVE-2017-9200.md): libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63. (no CVSS)
- [CVE-2017-9201](https://cve.now/CVE-2017-9201.md): imagew-cmd.c:850:46 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (divide-by-zero error) (no CVSS)
- [CVE-2017-9202](https://cve.now/CVE-2017-9202.md): imagew-cmd.c:854:45 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (divide-by-zero error) (no CVSS)
- [CVE-2017-9203](https://cve.now/CVE-2017-9203.md): imagew-main.c:960:12 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of service (buffer underflow) vi (no CVSS)
- [CVE-2017-9204](https://cve.now/CVE-2017-9204.md): The iw\_get\_ui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2017-9205](https://cve.now/CVE-2017-9205.md): The iw\_get\_ui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2017-9206](https://cve.now/CVE-2017-9206.md): The iw\_get\_ui16le function in imagew-util.c:405:23 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2017-9207](https://cve.now/CVE-2017-9207.md): The iw\_get\_ui16be function in imagew-util.c:422:24 in libimageworsener.a in ImageWorsener 1.3.1 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2017-9208](https://cve.now/CVE-2017-9208.md): libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF do (no CVSS)
- [CVE-2017-9209](https://cve.now/CVE-2017-9209.md): libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF do (no CVSS)
- [CVE-2017-9210](https://cve.now/CVE-2017-9210.md): libqpdf.a in QPDF 6.0.0 allows remote attackers to cause a denial of service (infinite recursion and stack consumption) via a crafted PDF do (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-05-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.