# CVEs published 2017-07-06

69 CVEs were published on July 6, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-0664](https://cve.now/CVE-2017-0664.md): A elevation of privilege vulnerability in the Android framework. (no CVSS, Google Android)
- [CVE-2017-0665](https://cve.now/CVE-2017-0665.md): A elevation of privilege vulnerability in the Android framework. (no CVSS, Google Android)
- [CVE-2017-0666](https://cve.now/CVE-2017-0666.md): A elevation of privilege vulnerability in the Android framework. (no CVSS, Google Android)
- [CVE-2017-0667](https://cve.now/CVE-2017-0667.md): A elevation of privilege vulnerability in the Android framework. (no CVSS, Google Android)
- [CVE-2017-0668](https://cve.now/CVE-2017-0668.md): A information disclosure vulnerability in the Android framework. (no CVSS, Google Android)
- [CVE-2017-0669](https://cve.now/CVE-2017-0669.md): A information disclosure vulnerability in the Android framework. (no CVSS, Google Android)
- [CVE-2017-0670](https://cve.now/CVE-2017-0670.md): A denial of service vulnerability in the Android framework. (no CVSS, Google Android)
- [CVE-2017-0671](https://cve.now/CVE-2017-0671.md): A remote code execution vulnerability in the Android libraries. (no CVSS, Google Android)
- [CVE-2017-0672](https://cve.now/CVE-2017-0672.md): A denial of service vulnerability in the Android libraries. (no CVSS, Google Android)
- [CVE-2017-0673](https://cve.now/CVE-2017-0673.md): A remote code execution vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0674](https://cve.now/CVE-2017-0674.md): A remote code execution vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0675](https://cve.now/CVE-2017-0675.md): A remote code execution vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0676](https://cve.now/CVE-2017-0676.md): A remote code execution vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0677](https://cve.now/CVE-2017-0677.md): A remote code execution vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0678](https://cve.now/CVE-2017-0678.md): A remote code execution vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0679](https://cve.now/CVE-2017-0679.md): A remote code execution vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0680](https://cve.now/CVE-2017-0680.md): A remote code execution vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0681](https://cve.now/CVE-2017-0681.md): A remote code execution vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0682](https://cve.now/CVE-2017-0682.md): A remote code execution vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0683](https://cve.now/CVE-2017-0683.md): A remote code execution vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0684](https://cve.now/CVE-2017-0684.md): A elevation of privilege vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0685](https://cve.now/CVE-2017-0685.md): A denial of service vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0686](https://cve.now/CVE-2017-0686.md): A denial of service vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0688](https://cve.now/CVE-2017-0688.md): A denial of service vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0689](https://cve.now/CVE-2017-0689.md): A denial of service vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0690](https://cve.now/CVE-2017-0690.md): A denial of service vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0691](https://cve.now/CVE-2017-0691.md): A denial of service vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0692](https://cve.now/CVE-2017-0692.md): A denial of service vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0693](https://cve.now/CVE-2017-0693.md): A denial of service vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0694](https://cve.now/CVE-2017-0694.md): A denial of service vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0695](https://cve.now/CVE-2017-0695.md): A denial of service vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0696](https://cve.now/CVE-2017-0696.md): A denial of service vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0697](https://cve.now/CVE-2017-0697.md): A denial of service vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0698](https://cve.now/CVE-2017-0698.md): A information disclosure vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0699](https://cve.now/CVE-2017-0699.md): A information disclosure vulnerability in the Android media framework. (no CVSS, Google Android)
- [CVE-2017-0700](https://cve.now/CVE-2017-0700.md): A remote code execution vulnerability in the Android system ui. (no CVSS, Google Android)
- [CVE-2017-0701](https://cve.now/CVE-2017-0701.md): A remote code execution vulnerability in the Android system ui. (no CVSS, Google Android)
- [CVE-2017-0702](https://cve.now/CVE-2017-0702.md): A remote code execution vulnerability in the Android system ui. (no CVSS, Google Android)
- [CVE-2017-0703](https://cve.now/CVE-2017-0703.md): A elevation of privilege vulnerability in the Android system ui. (no CVSS, Google Android)
- [CVE-2017-0704](https://cve.now/CVE-2017-0704.md): A elevation of privilege vulnerability in the Android system ui. (no CVSS, Google Android)
- [CVE-2017-0705](https://cve.now/CVE-2017-0705.md): A elevation of privilege vulnerability in the Broadcom wi-fi driver. (no CVSS, Google Android)
- [CVE-2017-0706](https://cve.now/CVE-2017-0706.md): A elevation of privilege vulnerability in the Broadcom wi-fi driver. (no CVSS, Google Android)
- [CVE-2017-0707](https://cve.now/CVE-2017-0707.md): A elevation of privilege vulnerability in the HTC led driver. (no CVSS, Google Android)
- [CVE-2017-0708](https://cve.now/CVE-2017-0708.md): A information disclosure vulnerability in the HTC sound driver. (no CVSS, Google Android)
- [CVE-2017-0709](https://cve.now/CVE-2017-0709.md): A information disclosure vulnerability in the HTC sensor hub driver. (no CVSS)
- [CVE-2017-0710](https://cve.now/CVE-2017-0710.md): A elevation of privilege vulnerability in the Upstream Linux tcb. (no CVSS, Google Android)
- [CVE-2017-0711](https://cve.now/CVE-2017-0711.md): A elevation of privilege vulnerability in the MediaTek networking driver. (no CVSS, Google Android)
- [CVE-2017-6247](https://cve.now/CVE-2017-6247.md): An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code with (no CVSS, Nvidia Android)
- [CVE-2017-6248](https://cve.now/CVE-2017-6248.md): An elevation of privilege vulnerability in the NVIDIA sound driver could enable a local malicious application to execute arbitrary code with (no CVSS)
- [CVE-2016-4000](https://cve.now/CVE-2016-4000.md): Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object. (no CVSS, org.python:jython-standalone · org.python:jython)
- [CVE-2017-10967](https://cve.now/CVE-2017-10967.md): In FineCMS before 2017-07-06, application\\core\\controller\\config.php allows XSS in the (1) key\_name, (2) key\_value, and (3) meaning paramete (no CVSS)
- [CVE-2017-10973](https://cve.now/CVE-2017-10973.md): In FineCMS before 2017-07-06, application/lib/ajax/get\_image\_data.php has SSRF, related to requests for non-image files with a modified HTTP (no CVSS)
- [CVE-2017-8290](https://cve.now/CVE-2017-8290.md): A potential Buffer Overflow Vulnerability (from a BB Code handling issue) has been identified in TeamSpeak Server version 3.0.13.6 (08/11/20 (no CVSS)
- [CVE-2017-8932](https://cve.now/CVE-2017-8932.md): A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 cau (no CVSS, stdlib)
- [CVE-2017-9524](https://cve.now/CVE-2017-9524.md): The qemu-nbd server in QEMU (aka Quick Emulator), when built with the Network Block Device (NBD) Server support, allows remote attackers to (no CVSS)
- [CVE-2017-10976](https://cve.now/CVE-2017-10976.md): When SWFTools 0.9.2 processes a crafted file in ttftool, it can lead to a heap-based buffer over-read in the readBlock() function in lib/ttf (no CVSS)
- [CVE-2017-10975](https://cve.now/CVE-2017-10975.md): Cross-site scripting (XSS) vulnerability in Lutim before 0.8 might allow remote attackers to inject arbitrary web script or HTML via a craft (no CVSS)
- [CVE-2017-1236](https://cve.now/CVE-2017-1236.md): IBM WebSphere MQ 9.0.2 could allow an authenticated user to potentially cause a denial of service by saving an incorrect channel status inqu (no CVSS, IBM MQ)
- [CVE-2017-10970](https://cve.now/CVE-2017-10970.md): Cross-site scripting (XSS) vulnerability in link.php in Cacti 1.1.12 allows remote anonymous users to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2017-10971](https://cve.now/CVE-2017-10971.md): In the X.Org X server before 2017-06-19, a user authenticated to an X Session could crash or execute code in the context of the X Server by (no CVSS)
- [CVE-2017-10972](https://cve.now/CVE-2017-10972.md): Uninitialized data in endianness conversion in the XEvent handling of the X.Org X Server before 2017-06-19 allowed authenticated malicious u (no CVSS)
- [CVE-2016-10396](https://cve.now/CVE-2016-10396.md): The racoon daemon in IPsec-Tools 0.8.2 contains a remotely exploitable computational-complexity attack when parsing and storing ISAKMP fragm (no CVSS)
- [CVE-2017-6707](https://cve.now/CVE-2017-6707.md): A vulnerability in the CLI command-parsing code of the Cisco StarOS operating system for Cisco ASR 5000 Series 11.0 through 21.0, 5500 Serie (no CVSS, Cisco StarOS)
- [CVE-2017-6708](https://cve.now/CVE-2017-6708.md): A vulnerability in the symbolic link (symlink) creation functionality of the AutoVNF tool for the Cisco Ultra Services Framework could allow (no CVSS, Cisco Ultra Services Framework)
- [CVE-2017-6709](https://cve.now/CVE-2017-6709.md): A vulnerability in the AutoVNF tool for the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to access adminis (no CVSS, Cisco Ultra Services Framework)
- [CVE-2017-6711](https://cve.now/CVE-2017-6711.md): A vulnerability in the Ultra Automation Service (UAS) of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker (no CVSS, Cisco Ultra Services Framework)
- [CVE-2017-6712](https://cve.now/CVE-2017-6712.md): A vulnerability in certain commands of Cisco Elastic Services Controller could allow an authenticated, remote attacker to elevate privileges (no CVSS, Cisco Elastic Services Controller)
- [CVE-2017-6713](https://cve.now/CVE-2017-6713.md): A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to gain ful (no CVSS, Cisco Elastic Services Controller)
- [CVE-2017-6714](https://cve.now/CVE-2017-6714.md): A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to ex (no CVSS, Cisco Ultra Services Framework)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-07-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.