CVEs published July 17, 2017
58 CVEs were published on July 17, 2017: 0 critical, 9 high. 8 are now in CISA KEV.
- Published
- 58
- Critical
- 0
- High
- 9
- Medium
- 0
- Low
- 0
- Unrated
- 49
- Now in CISA KEV
- 8
- Fix available
- 3
Most affected products
- Cisco IOS · IntelliShield Universal Product
- 4
- moodle/moodle
- 3
- bolt/bolt
- 2
- Cisco IOS
- 2
- Cisco IOS XE Software · IntelliShield Universal Product
- 2
- RSA Identity Governance and Lifecycle, RSA Via Lifecycle an…
- 2
- Cloud Foundry
- 1
- EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R
- 1
- Fuji Electric V-Server
- 1
- IntelliShield Universal Product
- 1
High 9
- CVE-2017-6736The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow Cisco IOS · IntelliShield Universal Product
- CVE-2017-6737A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to rCisco IOS
- CVE-2017-6738The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow Cisco IOS
- CVE-2017-6739A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to rIntelliShield Universal Product
- CVE-2017-6740The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow Cisco IOS · IntelliShield Universal Product
- CVE-2017-6741A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to rCisco IOS XE Software · IntelliShield Universal Product
- CVE-2017-6742A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to rCisco IOS XE Software · IntelliShield Universal Product
- CVE-2017-6743The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow Cisco IOS · IntelliShield Universal Product
- CVE-2017-6744The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow Cisco IOS · IntelliShield Universal Product
Medium, low and unrated 49
- CVE-2017-7947NetApp Clustered Data ONTAP before 8.3.2P11, 9.0 before P4, and 9.1 before P5 allow attackers to obtain sensitive password information by le
- CVE-2017-8896ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6, and 10.0.x before 10.0.2 are vulnerable to XSS on error pages by inj
- CVE-2017-9338Inadequate escaping lead to XSS vulnerability in the search module in ownCloud Server before 8.2.12, 9.0.x before 9.0.10, 9.1.x before 9.1.6
- CVE-2017-9339A logical error in ownCloud Server before 10.0.2 caused disclosure of valid share tokens for public calendars.
- CVE-2017-9340An attacker is logged in as a normal user and can somehow make admin to delete shared folders in ownCloud Server before 10.0.2.
- CVE-2017-9609Cross-site scripting (XSS) vulnerability in Blackcat CMS 1.2 allows remote authenticated users to inject arbitrary web script or HTML via th
- CVE-2017-9669A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by
- CVE-2017-9671A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by
- CVE-2017-9810There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Crit
- CVE-2017-9811The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critic
- CVE-2017-9812The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server
- CVE-2017-9813In Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312), the scriptName parameter of the
- CVE-2017-9933Improper cache invalidation in Joomla! CMS 1.7.3 through 3.7.2 leads to disclosure of form contents.
- CVE-2017-9934Missing CSRF token checks and improper input validation in Joomla! CMS 1.7.3 through 3.7.2 lead to an XSS vulnerability.
- CVE-2017-11127Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header.bolt/bolt
- CVE-2017-11128Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.bolt/bolt
- CVE-2017-11399Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a deni
- CVE-2017-3742In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when an ad-hoc connection is made between two syLenovo Group Lenovo Connect2
- CVE-2017-3754Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS.Lenovo Group Lenovo Notebook BIOS
- CVE-2017-9639An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior.Fuji Electric V-Server
- CVE-2017-10978An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()" and a denial of ser
- CVE-2017-10979An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" - this allows remote attackers to cause a denia
- CVE-2017-10980An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decode_tlv()" and a denial of service.
- CVE-2017-10981An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in fr_dhcp_decode()" and a denial of service.
- CVE-2017-10982An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in fr_dhcp_decode_options()" and a denial of service.
- CVE-2017-10983An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial
- CVE-2017-10984An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a deni
- CVE-2017-10985An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of ser
- CVE-2017-10986An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of service.
- CVE-2017-10987An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and a denial of service.
- CVE-2017-11361Inteno routers have a JUCI ACL misconfiguration that allows the "user" account to read files, write to files, and add root SSH keys via JSON
- CVE-2017-2642Moodle 3.x has user fullname disclosure on the user preferences page.moodle/moodle
- CVE-2017-7531In Moodle 3.3, the course overview block reveals activities in hidden courses.moodle/moodle
- CVE-2017-7532In Moodle 3.x, course creators are able to change system default settings for courses.moodle/moodle
- CVE-2017-8000In EMC RSA Authentication Manager 8.2 SP1 and earlier, a malicious RSA Security Console Administrator could craft a token profile and store RSA Authentication Manager 8.2 SP1 and earlier
- CVE-2017-8004The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance and RSA IMG products (RSA Identity Governance and Lifecycle RSA Identity Governance and Lifecycle, RSA Via Lifecycle an…
- CVE-2017-8005The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG products (RSA Identity Governance and LifecycleRSA Identity Governance and Lifecycle, RSA Via Lifecycle an…
- CVE-2017-8006In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, a malicious user logged into the Self-Service Console of RSA Authentication MRSA Authentication Manager 8.2 SP1 Patch 1 and earlier
- CVE-2017-8011EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNXEMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R
- CVE-2017-8034The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CCloud Foundry
- CVE-2017-11367The shoco_decompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial of service (buffer over-read
- CVE-2017-11354Fiyo CMS v2.0.7 has an SQL injection vulnerability in dapur/apps/app_article/sys_article.php via the name parameter in editing or adding a t
- CVE-2017-11360The ReadRLEImage function in coders\rle.c in ImageMagick 7.0.6-1 has a large loop vulnerability via a crafted rle file that triggers a huge
- CVE-2017-11362In PHP 7.x before 7.0.21 and 7.1.x before 7.1.7, ext/intl/msgformat/msgformat_parse.c does not restrict the locale length, which allows remo
- CVE-2017-9951The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation f
- CVE-2017-11352In ImageMagick before 7.0.5-10, a crafted RLE image can trigger a crash because of incorrect EOF handling in coders/rle.c.
- CVE-2017-11353yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git commands in setting permissions for new files
- CVE-2017-11348In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted
- CVE-2017-11349dataTaker DT8x dEX 1.72.007 allows remote attackers to compose programs or schedules, for purposes such as sending e-mail messages or making