# CVEs published 2017-07-20

87 CVEs were published on July 20, 2017: 1 critical, 1 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2017-11468](https://cve.now/CVE-2017-11468.md): Docker Registry before 2.6.2 in Docker Distribution does not properly restrict the amount of content accepted from a user, which allows remo (no CVSS, github.com/docker/distribution)
- [CVE-2017-11501](https://cve.now/CVE-2017-11501.md): NixOS 17.03 and earlier has an unintended default absence of SSL Certificate Validation for LDAP. (no CVSS)
- [CVE-2017-11502](https://cve.now/CVE-2017-11502.md): Technicolor DPC3928AD DOCSIS devices allow remote attackers to read arbitrary files via a request starting with "GET /../" on TCP port 4321. (no CVSS)
- [CVE-2017-11503](https://cve.now/CVE-2017-11503.md): PHPMailer 5.2.23 has XSS in the "From Email Address" and "To Email Address" fields of code\_generator.php. (no CVSS, phpmailer/phpmailer)
- [CVE-2017-11495](https://cve.now/CVE-2017-11495.md): PHICOMM K2(PSG1218) devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; a (no CVSS)
- [CVE-2017-11500](https://cve.now/CVE-2017-11500.md): A directory traversal vulnerability exists in MetInfo 5.3.17. (no CVSS)
- [CVE-2017-0378](https://cve.now/CVE-2017-0378.md): XSS exists in the login\_form function in views/helpers.php in Phamm before 0.6.7, exploitable via the PATH\_INFO to main.php. (no CVSS, phamm before)
- [CVE-2017-11478](https://cve.now/CVE-2017-11478.md): The ReadOneDJVUImage function in coders/djvu.c in ImageMagick through 6.9.9-0 and 7.x through 7.0.6-1 allows remote attackers to cause a den (no CVSS)
- [CVE-2017-2517](https://cve.now/CVE-2017-2517.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7006](https://cve.now/CVE-2017-7006.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7007](https://cve.now/CVE-2017-7007.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7008](https://cve.now/CVE-2017-7008.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7009](https://cve.now/CVE-2017-7009.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7010](https://cve.now/CVE-2017-7010.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7011](https://cve.now/CVE-2017-7011.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7012](https://cve.now/CVE-2017-7012.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7013](https://cve.now/CVE-2017-7013.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7014](https://cve.now/CVE-2017-7014.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7015](https://cve.now/CVE-2017-7015.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7016](https://cve.now/CVE-2017-7016.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7017](https://cve.now/CVE-2017-7017.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7018](https://cve.now/CVE-2017-7018.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7019](https://cve.now/CVE-2017-7019.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7020](https://cve.now/CVE-2017-7020.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7021](https://cve.now/CVE-2017-7021.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7022](https://cve.now/CVE-2017-7022.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7023](https://cve.now/CVE-2017-7023.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7024](https://cve.now/CVE-2017-7024.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7025](https://cve.now/CVE-2017-7025.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7026](https://cve.now/CVE-2017-7026.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7027](https://cve.now/CVE-2017-7027.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7028](https://cve.now/CVE-2017-7028.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7029](https://cve.now/CVE-2017-7029.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7030](https://cve.now/CVE-2017-7030.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7031](https://cve.now/CVE-2017-7031.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7032](https://cve.now/CVE-2017-7032.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7033](https://cve.now/CVE-2017-7033.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7034](https://cve.now/CVE-2017-7034.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7035](https://cve.now/CVE-2017-7035.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7036](https://cve.now/CVE-2017-7036.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7037](https://cve.now/CVE-2017-7037.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7038](https://cve.now/CVE-2017-7038.md): A DOMParser XSS issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7039](https://cve.now/CVE-2017-7039.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7040](https://cve.now/CVE-2017-7040.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7041](https://cve.now/CVE-2017-7041.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7042](https://cve.now/CVE-2017-7042.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7043](https://cve.now/CVE-2017-7043.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7044](https://cve.now/CVE-2017-7044.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7045](https://cve.now/CVE-2017-7045.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7046](https://cve.now/CVE-2017-7046.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7047](https://cve.now/CVE-2017-7047.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7048](https://cve.now/CVE-2017-7048.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7049](https://cve.now/CVE-2017-7049.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7050](https://cve.now/CVE-2017-7050.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7051](https://cve.now/CVE-2017-7051.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7052](https://cve.now/CVE-2017-7052.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7053](https://cve.now/CVE-2017-7053.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7054](https://cve.now/CVE-2017-7054.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7055](https://cve.now/CVE-2017-7055.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7056](https://cve.now/CVE-2017-7056.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7058](https://cve.now/CVE-2017-7058.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7059](https://cve.now/CVE-2017-7059.md): A DOMParser XSS issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7060](https://cve.now/CVE-2017-7060.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7061](https://cve.now/CVE-2017-7061.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7062](https://cve.now/CVE-2017-7062.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7063](https://cve.now/CVE-2017-7063.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7064](https://cve.now/CVE-2017-7064.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7067](https://cve.now/CVE-2017-7067.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7068](https://cve.now/CVE-2017-7068.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7069](https://cve.now/CVE-2017-7069.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-6530](https://cve.now/CVE-2017-6530.md): Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw\_v1.02.0014 4.20 do not check password.shtml authorization, leading to Arbitrary password (no CVSS)
- [CVE-2017-6531](https://cve.now/CVE-2017-6531.md): On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw\_v1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile (no CVSS)
- [CVE-2017-6532](https://cve.now/CVE-2017-6532.md): Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw\_v1.02.0014 4.20 have cleartext credentials in /mib.db. (no CVSS)
- [CVE-2017-9785](https://cve.now/CVE-2017-9785.md): Csrf.cs in NancyFX Nancy before 1.4.4 and 2.x before 2.0-dangermouse has Remote Code Execution via Deserialization of JSON data in a CSRF Co (no CVSS, NancyFX Framework Up to · Nancy)
- [CVE-2017-9822](https://cve.now/CVE-2017-9822.md): DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN site (CVSS 8.8, KEV, DotNetNuke CMS Fixed in · DotNetNuke.Core)
- [CVE-2017-11469](https://cve.now/CVE-2017-11469.md): get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the file\_name parameter. (no CVSS)
- [CVE-2017-11470](https://cve.now/CVE-2017-11470.md): IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatifGadget/getxenmetrics.php via the element parameter. (no CVSS)
- [CVE-2017-11471](https://cve.now/CVE-2017-11471.md): IDERA Uptime Monitor 7.8 has SQL injection in /gadgets/definitions/uptime.CapacityWhatIfGadget/getmetrics.php via the element parameter. (no CVSS)
- [CVE-2017-11472](https://cve.now/CVE-2017-11472.md): The acpi\_ns\_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel before 4.12 does not flush the operand cache and cause (no CVSS)
- [CVE-2017-11473](https://cve.now/CVE-2017-11473.md): Buffer overflow in the mp\_override\_legacy\_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 3.2 allows local users t (no CVSS)
- [CVE-2017-11474](https://cve.now/CVE-2017-11474.md): GLPI before 9.1.5.1 has SQL Injection in the $crit variable in inc/computer\_softwareversion.class.php, exploitable via ajax/common.tabs.php. (no CVSS)
- [CVE-2017-11475](https://cve.now/CVE-2017-11475.md): GLPI before 9.1.5.1 has SQL Injection in the condition rule field, exploitable via front/rulesengine.test.php. (no CVSS)
- [CVE-2017-6316](https://cve.now/CVE-2017-6316.md): Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute arbitrary shell commands as root via a CGISESSID (CVSS 9.8, KEV)
- [CVE-2017-10676](https://cve.now/CVE-2017-10676.md): On D-Link DIR-600M devices before C1\_v3.05ENB01\_beta\_20170306, XSS was found in the form2userconfig.cgi username parameter. (no CVSS)
- [CVE-2017-11466](https://cve.now/CVE-2017-11466.md): Arbitrary file upload vulnerability in com/dotmarketing/servlets/AjaxFileUploadServlet.class in dotCMS 4.1.1 allows remote authenticated adm (no CVSS)
- [CVE-2017-11467](https://cve.now/CVE-2017-11467.md): OrientDB through 2.2.22 does not enforce privilege requirements during "where" or "fetchplan" or "order by" use, which allows remote attacke (no CVSS, com.orientechnologies:orientdb-core)
- [CVE-2017-9765](https://cve.now/CVE-2017-9765.md): Integer overflow in the soap\_get function in Genivia gSOAP 2.7.x and 2.8.x before 2.8.48, as used on Axis cameras and other devices, allows (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-07-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.