CVEs published May 31, 2017
8 CVEs were published on May 31, 2017: 0 critical, 0 high.
- Published
- 8
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Intel Solid State Drive Toolbox
- 1
- VMware Horizon DaaS
- 1
Medium, low and unrated 8
- CVE-2017-4897VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data.VMware Horizon DaaS
- CVE-2017-5688There is an escalation of privilege vulnerability in the Intel Solid State Drive Toolbox versions before 3.4.5 which allow a local administrIntel Solid State Drive Toolbox
- CVE-2017-8402PivotX 2.3.11 allows remote authenticated users to execute arbitrary PHP code via vectors involving an upload of a .htaccess file.
- CVE-2017-8782The readString function in util/read.c and util/old/read.c in libming 0.4.8 allows remote attackers to cause a denial of service via a large
- CVE-2017-9304libyara/re.c in the regexp module in YARA 3.5.0 allows remote attackers to cause a denial of service (stack consumption) via a crafted rule
- CVE-2017-9305lib/core/TikiFilter/PreventXss.php in Tiki Wiki CMS Groupware 16.2 allows remote attackers to bypass the XSS filter via padded zero characte
- CVE-2017-9306inc/SP/Html/Html.class.php in sysPass 2.1.9 allows remote attackers to bypass the XSS filter, as demonstrated by use of an "<svg/onload=" su
- CVE-2017-9307SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and access intranet serve