# CVEs published 2017-06-13

121 CVEs were published on June 13, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9960](https://cve.now/CVE-2014-9960.md): In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API. (no CVSS, All Qualcomm products)
- [CVE-2014-9961](https://cve.now/CVE-2014-9961.md): In all Android releases from CAF using the Linux kernel, a vulnerability in eMMC write protection exists that can be used to bypass power-on (no CVSS, All Qualcomm products)
- [CVE-2014-9962](https://cve.now/CVE-2014-9962.md): In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of a DRM provisioning command. (no CVSS, All Qualcomm products)
- [CVE-2014-9963](https://cve.now/CVE-2014-9963.md): In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in WideVine DRM. (no CVSS, All Qualcomm products)
- [CVE-2014-9964](https://cve.now/CVE-2014-9964.md): In all Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in debug functionality. (no CVSS, All Qualcomm products)
- [CVE-2014-9965](https://cve.now/CVE-2014-9965.md): In all Android releases from CAF using the Linux kernel, a vulnerability exists in the parsing of an SCM call. (no CVSS, All Qualcomm products)
- [CVE-2014-9966](https://cve.now/CVE-2014-9966.md): In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability exists in Secure (no CVSS, All Qualcomm products)
- [CVE-2014-9967](https://cve.now/CVE-2014-9967.md): In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. (no CVSS, All Qualcomm products)
- [CVE-2015-9020](https://cve.now/CVE-2015-9020.md): In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the unlocking of memory. (no CVSS, All Qualcomm products)
- [CVE-2015-9021](https://cve.now/CVE-2015-9021.md): In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled. (no CVSS, All Qualcomm products)
- [CVE-2015-9022](https://cve.now/CVE-2015-9022.md): In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in several TZ APIs. (no CVSS, All Qualcomm products)
- [CVE-2015-9023](https://cve.now/CVE-2015-9023.md): In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API. (no CVSS, All Qualcomm products)
- [CVE-2015-9024](https://cve.now/CVE-2015-9024.md): In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications. (no CVSS, All Qualcomm products)
- [CVE-2015-9025](https://cve.now/CVE-2015-9025.md): In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application. (no CVSS, All Qualcomm products)
- [CVE-2015-9026](https://cve.now/CVE-2015-9026.md): In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. (no CVSS, All Qualcomm products)
- [CVE-2015-9027](https://cve.now/CVE-2015-9027.md): In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVine DRM. (no CVSS, All Qualcomm products)
- [CVE-2015-9028](https://cve.now/CVE-2015-9028.md): In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routine. (no CVSS, All Qualcomm products)
- [CVE-2015-9029](https://cve.now/CVE-2015-9029.md): In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access control settings of modem memory. (no CVSS, All Qualcomm products)
- [CVE-2015-9030](https://cve.now/CVE-2015-9030.md): In all Android releases from CAF using the Linux kernel, the Hypervisor API could be misused to bypass authentication. (no CVSS, All Qualcomm products)
- [CVE-2015-9031](https://cve.now/CVE-2015-9031.md): In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP. (no CVSS, All Qualcomm products)
- [CVE-2015-9032](https://cve.now/CVE-2015-9032.md): In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications. (no CVSS, All Qualcomm products)
- [CVE-2015-9033](https://cve.now/CVE-2015-9033.md): In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer. (no CVSS, All Qualcomm products)
- [CVE-2016-10332](https://cve.now/CVE-2016-10332.md): In all Android releases from CAF using the Linux kernel, stack protection was not enabled for secure applications. (no CVSS, All Qualcomm products)
- [CVE-2016-10333](https://cve.now/CVE-2016-10333.md): In all Android releases from CAF using the Linux kernel, a sensitive system call was allowed to be called by HLOS. (no CVSS, All Qualcomm products)
- [CVE-2016-10334](https://cve.now/CVE-2016-10334.md): In all Android releases from CAF using the Linux kernel, a dynamically-protected DDR region could potentially get overwritten. (no CVSS, All Qualcomm products)
- [CVE-2016-10335](https://cve.now/CVE-2016-10335.md): In all Android releases from CAF using the Linux kernel, libtomcrypt was updated. (no CVSS, All Qualcomm products)
- [CVE-2016-10336](https://cve.now/CVE-2016-10336.md): In all Android releases from CAF using the Linux kernel, some regions of memory were not protected during boot. (no CVSS, All Qualcomm products)
- [CVE-2016-10337](https://cve.now/CVE-2016-10337.md): In all Android releases from CAF using the Linux kernel, some validation of secure applications was not being performed. (no CVSS, All Qualcomm products)
- [CVE-2016-10338](https://cve.now/CVE-2016-10338.md): In all Android releases from CAF using the Linux kernel, there was an issue related to RPMB processing. (no CVSS, All Qualcomm products)
- [CVE-2016-10339](https://cve.now/CVE-2016-10339.md): In all Android releases from CAF using the Linux kernel, HLOS can overwite secure memory or read contents of the keystore. (no CVSS, All Qualcomm products)
- [CVE-2016-10340](https://cve.now/CVE-2016-10340.md): In all Android releases from CAF using the Linux kernel, an integer underflow leading to buffer overflow vulnerability exists in a syscall h (no CVSS, All Qualcomm products)
- [CVE-2016-10341](https://cve.now/CVE-2016-10341.md): In all Android releases from CAF using the Linux kernel, 3rd party TEEs have more privilege than intended. (no CVSS, All Qualcomm products)
- [CVE-2016-10342](https://cve.now/CVE-2016-10342.md): In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a syscall handler. (no CVSS, All Qualcomm products)
- [CVE-2017-7365](https://cve.now/CVE-2017-7365.md): In all Android releases from CAF using the Linux kernel, a buffer overread can occur if a particular string is not NULL terminated. (no CVSS, All Qualcomm products)
- [CVE-2017-7366](https://cve.now/CVE-2017-7366.md): In all Android releases from CAF using the Linux kernel, a KGSL ioctl was not validating all of its parameters. (no CVSS)
- [CVE-2017-7367](https://cve.now/CVE-2017-7367.md): In all Android releases from CAF using the Linux kernel, an integer underflow vulnerability exists while processing the boot image. (no CVSS, All Qualcomm products)
- [CVE-2017-7368](https://cve.now/CVE-2017-7368.md): In all Android releases from CAF using the Linux kernel, a race condition potentially exists in the ioctl handler of a sound driver. (no CVSS, All Qualcomm products)
- [CVE-2017-7369](https://cve.now/CVE-2017-7369.md): In all Android releases from CAF using the Linux kernel, an array index in an ALSA routine is not properly validating potentially leading to (no CVSS, All Qualcomm products)
- [CVE-2017-7370](https://cve.now/CVE-2017-7370.md): In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to a use-after-free c (no CVSS, All Qualcomm products)
- [CVE-2017-7371](https://cve.now/CVE-2017-7371.md): In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned o (no CVSS, All Qualcomm products)
- [CVE-2017-7372](https://cve.now/CVE-2017-7372.md): In all Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leading to buffer overflow or (no CVSS, All Qualcomm products)
- [CVE-2017-7373](https://cve.now/CVE-2017-7373.md): In all Android releases from CAF using the Linux kernel, a double free vulnerability exists in a display driver. (no CVSS, All Qualcomm products)
- [CVE-2017-8233](https://cve.now/CVE-2017-8233.md): In a camera driver function in all Android releases from CAF using the Linux kernel, a bounds check is missing when writing into an array po (no CVSS, All Qualcomm products)
- [CVE-2017-8234](https://cve.now/CVE-2017-8234.md): In all Android releases from CAF using the Linux kernel, an out of bounds access can potentially occur in a camera function. (no CVSS, All Qualcomm products)
- [CVE-2017-8235](https://cve.now/CVE-2017-8235.md): In all Android releases from CAF using the Linux kernel, a memory structure in a camera driver is not properly protected. (no CVSS, All Qualcomm products)
- [CVE-2017-8236](https://cve.now/CVE-2017-8236.md): In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an IPA driver. (no CVSS, All Qualcomm products)
- [CVE-2017-8237](https://cve.now/CVE-2017-8237.md): In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists while loading a firmware image. (no CVSS, All Qualcomm products)
- [CVE-2017-8238](https://cve.now/CVE-2017-8238.md): In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a camera function. (no CVSS, All Qualcomm products)
- [CVE-2017-8239](https://cve.now/CVE-2017-8239.md): In all Android releases from CAF using the Linux kernel, userspace-controlled parameters for flash initialization are not sanitized potentia (no CVSS, All Qualcomm products)
- [CVE-2017-8240](https://cve.now/CVE-2017-8240.md): In all Android releases from CAF using the Linux kernel, a kernel driver has an off-by-one buffer over-read vulnerability. (no CVSS, All Qualcomm products)
- [CVE-2017-8241](https://cve.now/CVE-2017-8241.md): In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a WLAN function due to an incorrect messa (no CVSS, All Qualcomm products)
- [CVE-2017-8242](https://cve.now/CVE-2017-8242.md): In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memory (no CVSS, All Qualcomm products)
- [CVE-2016-9973](https://cve.now/CVE-2016-9973.md): IBM Jazz Foundation is vulnerable to cross-site scripting. (no CVSS, IBM Rational Collaborative Lifecycle Management)
- [CVE-2016-9984](https://cve.now/CVE-2016-9984.md): IBM Maximo Asset Management 7.5 and 7.6 could allow a remote authenticated attacker to execute arbitrary commands on the system as administr (no CVSS, IBM Maximo Asset Management)
- [CVE-2017-1099](https://cve.now/CVE-2017-1099.md): IBM Jazz Foundation could expose potentially sensitive information to authenticated users through stack trace error conditions. (no CVSS, IBM Rational Collaborative Lifecycle Management)
- [CVE-2017-1100](https://cve.now/CVE-2017-1100.md): IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Rational Quality Manager)
- [CVE-2017-1101](https://cve.now/CVE-2017-1101.md): IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Rational Quality Manager)
- [CVE-2017-1102](https://cve.now/CVE-2017-1102.md): IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Rational Quality Manager)
- [CVE-2017-1104](https://cve.now/CVE-2017-1104.md): IBM Quality Manager (RQM) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Rational Quality Manager)
- [CVE-2017-9605](https://cve.now/CVE-2017-9605.md): The vmw\_gb\_surface\_define\_ioctl function (accessible via DRM\_IOCTL\_VMW\_GB\_SURFACE\_CREATE) in drivers/gpu/drm/vmwgfx/vmwgfx\_surface.c in the (no CVSS)
- [CVE-2017-9246](https://cve.now/CVE-2017-9246.md): New Relic .NET Agent before 6.3.123.0 adds SQL injection flaws to safe applications via vectors involving failure to escape quotes during us (no CVSS, NewRelic.Agent)
- [CVE-2017-9429](https://cve.now/CVE-2017-9429.md): SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitrary SQL commands via (no CVSS)
- [CVE-2017-9603](https://cve.now/CVE-2017-9603.md): SQL injection vulnerability in the WP Jobs plugin before 1.5 for WordPress allows authenticated users to execute arbitrary SQL commands via (no CVSS)
- [CVE-2016-3704](https://cve.now/CVE-2016-3704.md): Pulp before 2.8.5 uses bash's $RANDOM in an unsafe way to generate passwords. (no CVSS)
- [CVE-2016-5391](https://cve.now/CVE-2016-5391.md): libreswan before 3.18 allows remote attackers to cause a denial of service (NULL pointer dereference and pluto daemon restart). (no CVSS)
- [CVE-2015-3220](https://cve.now/CVE-2015-3220.md): The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash). (no CVSS, tlslite)
- [CVE-2015-4596](https://cve.now/CVE-2015-4596.md): Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges. (no CVSS)
- [CVE-2016-3696](https://cve.now/CVE-2016-3696.md): The pulp-qpid-ssl-cfg script in Pulp before 2.8.5 allows local users to obtain the CA key. (no CVSS)
- [CVE-2016-5411](https://cve.now/CVE-2016-5411.md): /var/lib/ovirt-engine/setup/engine-DC-config.py in Red Hat QuickStart Cloud Installer (QCI) before 1.0 GA is created world readable and cont (no CVSS)
- [CVE-2017-9552](https://cve.now/CVE-2017-9552.md): A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline. (no CVSS, Synology Photo Station)
- [CVE-2017-9604](https://cve.now/CVE-2017-9604.md): KDE kmail before 5.5.2 and messagelib before 5.5.2, as distributed in KDE Applications before 17.04.2, do not ensure that a plugin's sign/en (no CVSS)
- [CVE-2016-6655](https://cve.now/CVE-2016-6655.md): An issue was discovered in Cloud Foundry Foundation Cloud Foundry release versions prior to v245 and cf-mysql-release versions prior to v31. (no CVSS, Cloud Foundry)
- [CVE-2016-8218](https://cve.now/CVE-2016-8218.md): An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. (no CVSS, Cloud Foundry)
- [CVE-2016-8219](https://cve.now/CVE-2016-8219.md): An issue was discovered in Cloud Foundry Foundation cf-release versions prior to 250 and CAPI-release versions prior to 1.12.0. (no CVSS, Cloud Foundry)
- [CVE-2017-2773](https://cve.now/CVE-2017-2773.md): An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.60, 1.7.x versions prior to 1.7.41, 1.8.x versions prior (no CVSS, PCF Elastic Runtime)
- [CVE-2017-4955](https://cve.now/CVE-2017-4955.md): An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.65, 1.7.x versions prior to 1.7.48, 1.8.x versions prior (no CVSS, PCF Elastic Runtime)
- [CVE-2017-4959](https://cve.now/CVE-2017-4959.md): An issue was discovered in Pivotal PCF Elastic Runtime 1.8.x versions prior to 1.8.29 and 1.9.x versions prior to 1.9.7. (no CVSS, PCF Elastic Runtime)
- [CVE-2017-4961](https://cve.now/CVE-2017-4961.md): An issue was discovered in Cloud Foundry Foundation BOSH Release 261.x versions prior to 261.3 and all 260.x versions. (no CVSS, Cloud Foundry Foundation BOSH Release)
- [CVE-2017-4963](https://cve.now/CVE-2017-4963.md): An issue was discovered in Cloud Foundry Foundation Cloud Foundry release v252 and earlier versions, UAA stand-alone release v2.0.0 - v2.7.4 (no CVSS, Cloud Foundry Foundation)
- [CVE-2017-4965](https://cve.now/CVE-2017-4965.md): An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and t (no CVSS, Pivotal RabbitMQ)
- [CVE-2017-4966](https://cve.now/CVE-2017-4966.md): An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and t (no CVSS, Pivotal RabbitMQ)
- [CVE-2017-4967](https://cve.now/CVE-2017-4967.md): An issue was discovered in these Pivotal RabbitMQ versions: all 3.4.x versions, all 3.5.x versions, and 3.6.x versions prior to 3.6.9; and t (no CVSS, Pivotal RabbitMQ)
- [CVE-2017-4970](https://cve.now/CVE-2017-4970.md): An issue was discovered in Cloud Foundry Foundation cf-release v255 and Staticfile buildpack versions v1.4.0 - v1.4.3. (no CVSS, Cloud Foundry)
- [CVE-2017-4971](https://cve.now/CVE-2017-4971.md): An issue was discovered in Pivotal Spring Web Flow through 2.4.4. (no CVSS, Spring Web Flow · org.springframework.webflow:spring-webflow)
- [CVE-2017-4972](https://cve.now/CVE-2017-4972.md): An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x ve (no CVSS, Cloud Foundry UAA)
- [CVE-2017-4973](https://cve.now/CVE-2017-4973.md): An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v257; UAA release 2.x versions prior to v2.7.4.14, 3.6.x ve (no CVSS, Cloud Foundry UAA · org.cloudfoundry.identity:cloudfoundry-…)
- [CVE-2017-4974](https://cve.now/CVE-2017-4974.md): An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v258; UAA release 2.x versions prior to v2.7.4.15, 3.6.x ve (no CVSS, Cloud Foundry UAA · org.cloudfoundry.identity:cloudfoundry-…)
- [CVE-2017-4975](https://cve.now/CVE-2017-4975.md): An issue was discovered in Pivotal PCF Tile Generator versions prior to 6.0.0. (no CVSS, PCF Tile Generator)
- [CVE-2017-4991](https://cve.now/CVE-2017-4991.md): An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v260; UAA release 2.x versions prior to v2.7.4.16, 3.6.x ve (no CVSS, Cloud Foundry UAA · org.cloudfoundry.identity:cloudfoundry-…)
- [CVE-2017-4992](https://cve.now/CVE-2017-4992.md): An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v261; UAA release 2.x versions prior to v2.7.4.17, 3.6.x ve (no CVSS, Cloud Foundry · org.cloudfoundry.identity:cloudfoundry-iden…)
- [CVE-2017-4994](https://cve.now/CVE-2017-4994.md): An issue was discovered in Cloud Foundry Foundation cf-release versions prior to v263; UAA release 2.x versions prior to v2.7.4.18, 3.6.x ve (no CVSS, Cloud Foundry)
- [CVE-2017-6655](https://cve.now/CVE-2017-6655.md): A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, ad (no CVSS, Cisco NX-OS Software Fibre Channel over Ethernet)
- [CVE-2017-6656](https://cve.now/CVE-2017-6656.md): A vulnerability in Session Initiation Protocol (SIP) call handling of Cisco IP Phone 8800 Series devices could allow an unauthenticated, rem (no CVSS, Cisco IP Phone 8800 Series)
- [CVE-2017-6659](https://cve.now/CVE-2017-6659.md): A vulnerability in the web-based management interface of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker (no CVSS, Cisco Prime Collaboration Assurance)
- [CVE-2017-6661](https://cve.now/CVE-2017-6661.md): A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) and Cisco Content Security Management Applianc (no CVSS, Cisco Email Security and Content Security Management Applia…)
- [CVE-2017-6666](https://cve.now/CVE-2017-6666.md): A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could al (no CVSS, Cisco Network Convergence System 5500 Series Routers)
- [CVE-2017-6667](https://cve.now/CVE-2017-6667.md): A vulnerability in the update process for the dynamic JAR file of the Cisco Context Service software development kit (SDK) could allow an un (no CVSS, Cisco Context Service SDK)
- [CVE-2017-6668](https://cve.now/CVE-2017-6668.md): Vulnerabilities in the web-based GUI of Cisco Unified Communications Domain Manager (CUCDM) could allow an authenticated, remote attacker to (no CVSS, Cisco Unified Communications Domain Manager)
- [CVE-2017-6670](https://cve.now/CVE-2017-6670.md): A vulnerability in the web-based GUI of Cisco Unified Communications Domain Manager could allow an unauthenticated, remote attacker to redir (no CVSS, Cisco Unified Communications Domain Manager)
- [CVE-2017-6671](https://cve.now/CVE-2017-6671.md): A vulnerability in the email message scanning of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthentica (no CVSS, Cisco Email Security Appliance)
- [CVE-2017-6673](https://cve.now/CVE-2017-6673.md): A vulnerability in Cisco Firepower Management Center could allow an authenticated, remote attacker to obtain user information. (no CVSS, Cisco Firepower Management Center)
- [CVE-2017-6674](https://cve.now/CVE-2017-6674.md): A vulnerability in the feature-license management functionality of Cisco Firepower System Software could allow an unauthenticated, remote at (no CVSS, Cisco Firepower System Software)
- [CVE-2017-6675](https://cve.now/CVE-2017-6675.md): A vulnerability in the web interface of Cisco Industrial Network Director could allow an unauthenticated, remote attacker to conduct a refle (no CVSS, Cisco Industrial Network Director)
- [CVE-2017-6680](https://cve.now/CVE-2017-6680.md): A vulnerability in the AutoVNF logging function of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to create (no CVSS, Cisco Ultra Services Framework)
- [CVE-2017-6681](https://cve.now/CVE-2017-6681.md): A vulnerability in the AutoVNF VNFStagingView class of Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to exe (no CVSS, Cisco Ultra Services Framework)
- [CVE-2017-6682](https://cve.now/CVE-2017-6682.md): A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to run arbitrary comman (no CVSS, Cisco Elastic Services Controller)
- [CVE-2017-6683](https://cve.now/CVE-2017-6683.md): A vulnerability in the esc\_listener.py script of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to execute (no CVSS, Cisco Elastic Services Controller)
- [CVE-2017-6684](https://cve.now/CVE-2017-6684.md): A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the L (no CVSS, Cisco Elastic Services Controller)
- [CVE-2017-6685](https://cve.now/CVE-2017-6685.md): A vulnerability in Cisco Ultra Services Framework Staging Server could allow an authenticated, remote attacker with access to the management (no CVSS, Cisco Ultra Services Framework Staging Server)
- [CVE-2017-6686](https://cve.now/CVE-2017-6686.md): A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the managemen (no CVSS, Cisco Ultra Services Framework Element Manager)
- [CVE-2017-6687](https://cve.now/CVE-2017-6687.md): A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker with access to the managemen (no CVSS, Cisco Ultra Services Framework Element Manager)
- [CVE-2017-6688](https://cve.now/CVE-2017-6688.md): A vulnerability in Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affected system as the L (no CVSS, Cisco Elastic Services Controller)
- [CVE-2017-6689](https://cve.now/CVE-2017-6689.md): A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to log in to an affecte (no CVSS, Cisco Elastic Services Controller)
- [CVE-2017-6690](https://cve.now/CVE-2017-6690.md): A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system c (no CVSS, Cisco StarOS)
- [CVE-2017-6691](https://cve.now/CVE-2017-6691.md): A vulnerability in the ConfD CLI of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive inf (no CVSS, Cisco Elastic Services Controller)
- [CVE-2017-6692](https://cve.now/CVE-2017-6692.md): A vulnerability in Cisco Ultra Services Framework Element Manager could allow an authenticated, remote attacker to log in to the device with (no CVSS, Cisco Ultra Services Framework Element Manager)
- [CVE-2017-6693](https://cve.now/CVE-2017-6693.md): A vulnerability in the ConfD server component of Cisco Elastic Services Controllers could allow an authenticated, local attacker to access i (no CVSS, Cisco Elastic Services Controller)
- [CVE-2017-6694](https://cve.now/CVE-2017-6694.md): A vulnerability in the Virtual Network Function Manager's (VNFM) logging function of Cisco Ultra Services Platform could allow an authentica (no CVSS, Cisco Ultra Services Platform)
- [CVE-2017-6695](https://cve.now/CVE-2017-6695.md): A vulnerability in the ConfD server in Cisco Ultra Services Platform could allow an authenticated, local attacker to view sensitive informat (no CVSS, Cisco Ultra Services Platform)
- [CVE-2017-6696](https://cve.now/CVE-2017-6696.md): A vulnerability in the file system of Cisco Elastic Services Controllers could allow an authenticated, local attacker to gain access to sens (no CVSS, Cisco Elastic Services Controller)
- [CVE-2017-6697](https://cve.now/CVE-2017-6697.md): A vulnerability in the web interface of Cisco Elastic Services Controllers could allow an authenticated, remote attacker to access sensitive (no CVSS, Cisco Elastic Services Controller)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-06-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.