# CVEs published 2017-05-30

16 CVEs were published on May 30, 2017: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2017-7494](https://cve.now/CVE-2017-7494.md): Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious cli (CVSS 9.8, KEV, samba)
- [CVE-2017-7502](https://cve.now/CVE-2017-7502.md): Null pointer dereference vulnerability in NSS since 3.24.0 was found when server receives empty SSLv2 messages resulting into denial of serv (no CVSS, NSS project nss)
- [CVE-2017-7511](https://cve.now/CVE-2017-7511.md): poppler since version 0.17.3 has been vulnerable to NULL pointer dereference in pdfunite triggered by specially crafted documents. (no CVSS, poppler)
- [CVE-2016-3083](https://cve.now/CVE-2016-3083.md): Apache Hive (JDBC + HiveServer2) implements SSL for plain TCP and HTTP connections (it supports both transport modes). (no CVSS, Apache Software Foundation Apache Hive · org.apache.hive… +2)
- [CVE-2017-2300](https://cve.now/CVE-2017-2300.md): On Juniper Networks SRX Series Services Gateways chassis clusters running Junos OS 12.1X46 prior to 12.1X46-D65, 12.3X48 prior to 12.3X48-D4 (no CVSS, Juniper Networks Junos OS on SRX Series Services Gateways c…)
- [CVE-2017-2301](https://cve.now/CVE-2017-2301.md): On Juniper Networks products or platforms running Junos OS 11.4 prior to 11.4R13-S3, 12.1X46 prior to 12.1X46-D60, 12.3 prior to 12.3R12-S2 (no CVSS, Juniper Networks Junos OS with DHCPv6 enabled)
- [CVE-2017-2302](https://cve.now/CVE-2017-2302.md): On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D55, 12.1X47 prior to 12.1X47-D45, 12.3R13 prior to 12.3 (no CVSS, Juniper Networks Junos OS where the BGP add-path feature is…)
- [CVE-2017-2303](https://cve.now/CVE-2017-2303.md): On Juniper Networks products or platforms running Junos OS 12.1X46 prior to 12.1X46-D50, 12.1X47 prior to 12.1X47-D40, 12.3 prior to 12.3R13 (no CVSS, Juniper Networks Junos OS where RIP is enabled)
- [CVE-2017-2304](https://cve.now/CVE-2017-2304.md): Juniper Networks QFX3500, QFX3600, QFX5100, QFX5200, EX4300 and EX4600 devices running Junos OS 14.1X53 prior to 14.1X53-D40, 15.1X53 prior (no CVSS, Juniper Networks Junos OS running on QFX3500, QFX3600, QFX5…)
- [CVE-2017-2305](https://cve.now/CVE-2017-2305.md): On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space admi (no CVSS, Juniper Networks Junos Space)
- [CVE-2017-2306](https://cve.now/CVE-2017-2306.md): On Juniper Networks Junos Space versions prior to 16.1R1, due to an insufficient authorization check, readonly users on the Junos Space admi (no CVSS, Juniper Networks Junos Space)
- [CVE-2017-2307](https://cve.now/CVE-2017-2307.md): A reflected cross site scripting vulnerability in the administrative interface of Juniper Networks Junos Space versions prior to 16.1R1 may (no CVSS, Juniper Networks Junos Space)
- [CVE-2017-2308](https://cve.now/CVE-2017-2308.md): An XML External Entity Injection vulnerability in Juniper Networks Junos Space versions prior to 16.1R1 may allow an authenticated user to r (no CVSS, Juniper Networks Junos Space)
- [CVE-2017-2309](https://cve.now/CVE-2017-2309.md): On Juniper Networks Junos Space versions prior to 16.1R1 when certificate based authentication is enabled for the Junos Space cluster, some (no CVSS, Juniper Networks Junos Space)
- [CVE-2017-2310](https://cve.now/CVE-2017-2310.md): A firewall bypass vulnerability in the host based firewall of Juniper Networks Junos Space versions prior to 16.1R1 may permit certain craft (no CVSS, Juniper Networks Junos Space)
- [CVE-2017-2311](https://cve.now/CVE-2017-2311.md): On Juniper Networks Junos Space versions prior to 16.1R1, an unauthenticated remote attacker with network access to Junos space device can e (no CVSS, Juniper Networks Junos Space)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-05-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.