# CVEs published 2017-06-20 31 CVEs were published on June 20, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-3075](https://cve.now/CVE-2017-3075.md): Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability when manipulating the ActionsScript 2 XM (no CVSS, Adobe Flash Player 25.0.0.171 and earlier.) - [CVE-2017-3076](https://cve.now/CVE-2017-3076.md): Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the MPEG-4 AVC module. (no CVSS, Adobe Flash Player 25.0.0.171 and earlier.) - [CVE-2017-3077](https://cve.now/CVE-2017-3077.md): Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the PNG image parser. (no CVSS, Adobe Flash Player 25.0.0.171 and earlier.) - [CVE-2017-3078](https://cve.now/CVE-2017-3078.md): Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the Adobe Texture Format (ATF) mod (no CVSS, Adobe Flash Player 25.0.0.171 and earlier.) - [CVE-2017-3079](https://cve.now/CVE-2017-3079.md): Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the internal representation of ras (no CVSS, Adobe Flash Player 25.0.0.171 and earlier.) - [CVE-2017-3081](https://cve.now/CVE-2017-3081.md): Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability during internal computation caused by mu (no CVSS, Adobe Flash Player 25.0.0.171 and earlier.) - [CVE-2017-3082](https://cve.now/CVE-2017-3082.md): Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable memory corruption vulnerability in the LocaleID class. (no CVSS, Adobe Flash Player 25.0.0.171 and earlier.) - [CVE-2017-3083](https://cve.now/CVE-2017-3083.md): Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the Primetime SDK functionality relat (no CVSS, Adobe Flash Player 25.0.0.171 and earlier.) - [CVE-2017-3084](https://cve.now/CVE-2017-3084.md): Adobe Flash Player versions 25.0.0.171 and earlier have an exploitable use after free vulnerability in the advertising metadata functionalit (no CVSS, Adobe Flash Player 25.0.0.171 and earlier.) - [CVE-2017-3086](https://cve.now/CVE-2017-3086.md): Adobe Shockwave versions 12.2.8.198 and earlier have an exploitable memory corruption vulnerability. (no CVSS, Adobe Shockwave 12.2.8.198 and earlier.) - [CVE-2017-3087](https://cve.now/CVE-2017-3087.md): Adobe Captivate versions 9 and earlier have an information disclosure vulnerability resulting from abuse of the quiz reporting feature in Ca (no CVSS, Adobe Captivate 9 and earlier.) - [CVE-2017-3088](https://cve.now/CVE-2017-3088.md): Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime engine. (no CVSS, Adobe Digital Editions 4.5.4 and earlier.) - [CVE-2017-3089](https://cve.now/CVE-2017-3089.md): Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF imaging model. (no CVSS, Adobe Digital Editions 4.5.4 and earlier.) - [CVE-2017-3090](https://cve.now/CVE-2017-3090.md): Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. (no CVSS, Adobe Digital Editions 4.5.4 and earlier.) - [CVE-2017-3092](https://cve.now/CVE-2017-3092.md): Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. (no CVSS, Adobe Digital Editions 4.5.4 and earlier.) - [CVE-2017-3093](https://cve.now/CVE-2017-3093.md): Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the bitmap representation module. (no CVSS, Adobe Digital Editions 4.5.4 and earlier.) - [CVE-2017-3094](https://cve.now/CVE-2017-3094.md): Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF processing engine. (no CVSS, Adobe Digital Editions 4.5.4 and earlier.) - [CVE-2017-3095](https://cve.now/CVE-2017-3095.md): Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF parsing engine. (no CVSS, Adobe Digital Editions 4.5.4 and earlier.) - [CVE-2017-3096](https://cve.now/CVE-2017-3096.md): Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the character code mapping module. (no CVSS, Adobe Digital Editions 4.5.4 and earlier.) - [CVE-2017-3097](https://cve.now/CVE-2017-3097.md): Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. (no CVSS, Adobe Digital Editions 4.5.4 and earlier.) - [CVE-2017-3098](https://cve.now/CVE-2017-3098.md): Adobe Captivate versions 9 and earlier have a remote code execution vulnerability in the quiz reporting feature that could be abused to read (no CVSS, Adobe Captivate 9 and earlier.) - [CVE-2017-3167](https://cve.now/CVE-2017-3167.md): In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap\_get\_basic\_auth\_pw() by third-party modules outside of the authent (no CVSS, Apache Software Foundation Apache HTTP Server) - [CVE-2017-3169](https://cve.now/CVE-2017-3169.md): In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod\_ssl may dereference a NULL pointer when third-party modules call ap\_hook\_pr (no CVSS, Apache Software Foundation Apache HTTP Server) - [CVE-2017-7668](https://cve.now/CVE-2017-7668.md): The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap\_find\_token() (no CVSS, Apache Software Foundation Apache HTTP Server) - [CVE-2017-7679](https://cve.now/CVE-2017-7679.md): In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod\_mime can read one byte past the end of a buffer when sending a malicious Co (no CVSS, Apache Software Foundation Apache HTTP Server) - [CVE-2017-3214](https://cve.now/CVE-2017-3214.md): The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary. (no CVSS, Milwaukee Tool ONE-KEY) - [CVE-2017-3215](https://cve.now/CVE-2017-3215.md): The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. (no CVSS, Milwaukee Tool ONE-KEY) - [CVE-2017-3216](https://cve.now/CVE-2017-3216.md): WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote (no CVSS, Huawei Technologies BM2022 · Huawei Technologies HES-30… +12) - [CVE-2017-3743](https://cve.now/CVE-2017-3743.md): If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Setti (no CVSS, Lenovo Group ToolsCenter) - [CVE-2017-3744](https://cve.now/CVE-2017-3744.md): In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in the First Failure Data (no CVSS, Lenovo Group Lenovo System x IMM2) - [CVE-2017-3745](https://cve.now/CVE-2017-3745.md): In Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a non-administrative user may have access to (no CVSS, Lenovo Group XClarity Administrator) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-06-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.