# CVEs published 2017-07-04 30 CVEs were published on July 4, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-10810](https://cve.now/CVE-2017-10810.md): Memory leak in the virtio\_gpu\_object\_create function in drivers/gpu/drm/virtio/virtgpu\_object.c in the Linux kernel through 4.11.8 allows at (no CVSS) - [CVE-2017-10803](https://cve.now/CVE-2017-10803.md): In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, insecure handling of anonymization data in the D (no CVSS) - [CVE-2017-10804](https://cve.now/CVE-2017-10804.md): In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, remote attackers can bypass authentication under (no CVSS) - [CVE-2017-10805](https://cve.now/CVE-2017-10805.md): In Odoo 8.0, Odoo Community Edition 9.0 and 10.0, and Odoo Enterprise Edition 9.0 and 10.0, incorrect access control on OAuth tokens in the (no CVSS) - [CVE-2017-7276](https://cve.now/CVE-2017-7276.md): There is reflected XSS in TOPdesk before 5.7.6 and 6.x and 7.x before 7.03.019. (no CVSS) - [CVE-2017-10807](https://cve.now/CVE-2017-10807.md): JabberD 2.x (aka jabberd2) before 2.6.1 allows anyone to authenticate using SASL ANONYMOUS, even when the sasl.anonymous c2s.xml option is n (no CVSS) - [CVE-2017-7315](https://cve.now/CVE-2017-7315.md): An issue was discovered on Humax Digital HG100R 2.0.6 devices. (no CVSS) - [CVE-2017-7316](https://cve.now/CVE-2017-7316.md): An issue was discovered on Humax Digital HG100R 2.0.6 devices. (no CVSS) - [CVE-2017-7317](https://cve.now/CVE-2017-7317.md): An issue was discovered on Humax Digital HG100 2.0.6 devices. (no CVSS) - [CVE-2017-9313](https://cve.now/CVE-2017-9313.md): Multiple Cross-site scripting (XSS) vulnerabilities in Webmin before 1.850 allow remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2017-3865](https://cve.now/CVE-2017-3865.md): A vulnerability in the IPsec component of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an unauthenticated, remote attacker to (no CVSS, Cisco StarOS for ASR 5000 Series Routers) - [CVE-2017-6605](https://cve.now/CVE-2017-6605.md): A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker (no CVSS, Cisco Identity Services Engine) - [CVE-2017-6698](https://cve.now/CVE-2017-6698.md): A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an (no CVSS, Cisco Prime Infrastructure and Evolved Programmable Network…) - [CVE-2017-6699](https://cve.now/CVE-2017-6699.md): A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) cou (no CVSS, Cisco Prime Infrastructure and Evolved Programmable Network…) - [CVE-2017-6700](https://cve.now/CVE-2017-6700.md): A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) cou (no CVSS, Cisco Prime Infrastructure and Evolved Programmable Network…) - [CVE-2017-6701](https://cve.now/CVE-2017-6701.md): A vulnerability in the web application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote a (no CVSS, Cisco Identity Services Engine) - [CVE-2017-6702](https://cve.now/CVE-2017-6702.md): A vulnerability in the web framework of Cisco SocialMiner could allow an unauthenticated, remote attacker to conduct a cross-site scripting (no CVSS, Cisco SocialMiner) - [CVE-2017-6703](https://cve.now/CVE-2017-6703.md): A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, remote attacker to (no CVSS, Cisco Prime Collaboration Provisioning Tool) - [CVE-2017-6704](https://cve.now/CVE-2017-6704.md): A vulnerability in the web application in the Cisco Prime Collaboration Provisioning tool could allow an authenticated, remote attacker to p (no CVSS, Cisco Prime Collaboration Provisioning Tool) - [CVE-2017-6705](https://cve.now/CVE-2017-6705.md): A vulnerability in the filesystem of the Cisco Prime Collaboration Provisioning tool could allow an authenticated, local attacker to acquire (no CVSS, Cisco Prime Collaboration Provisioning Tool) - [CVE-2017-6706](https://cve.now/CVE-2017-6706.md): A vulnerability in the logging subsystem of the Cisco Prime Collaboration Provisioning tool could allow an unauthenticated, local attacker t (no CVSS, Cisco Prime Collaboration Provisioning Tool) - [CVE-2017-6715](https://cve.now/CVE-2017-6715.md): A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-s (no CVSS, Cisco Firepower Management Center) - [CVE-2017-6716](https://cve.now/CVE-2017-6716.md): A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a st (no CVSS, Cisco Firepower Management Center) - [CVE-2017-6717](https://cve.now/CVE-2017-6717.md): A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-s (no CVSS, Cisco Firepower Management Center) - [CVE-2017-6718](https://cve.now/CVE-2017-6718.md): A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level. (no CVSS, Cisco IOS XR) - [CVE-2017-6719](https://cve.now/CVE-2017-6719.md): A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host o (no CVSS, Cisco IOS XR) - [CVE-2017-6721](https://cve.now/CVE-2017-6721.md): A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could allow an unauthenti (no CVSS, Cisco Wide Area Application Services) - [CVE-2017-6722](https://cve.now/CVE-2017-6722.md): A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow (no CVSS, Cisco Unified Contact Center Express) - [CVE-2017-6724](https://cve.now/CVE-2017-6724.md): A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-s (no CVSS, Cisco Prime Infrastructure) - [CVE-2017-6725](https://cve.now/CVE-2017-6725.md): A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-s (no CVSS, Cisco Prime Infrastructure) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-07-04 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.