# CVEs published 2017-07-29

12 CVEs were published on July 29, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-11736](https://cve.now/CVE-2017-11736.md): SQL injection vulnerability in core\\admin\\auto-modules\\forms\\process.php in BigTree 4.2.18 allows remote authenticated users to execute arbi (no CVSS)
- [CVE-2017-11737](https://cve.now/CVE-2017-11737.md): interface/js/app/history.js in WebUI in Rspamd before 1.6.3 allows XSS via the Subject and Message-Id headers, which are mishandled in the h (no CVSS)
- [CVE-2017-11723](https://cve.now/CVE-2017-11723.md): Directory traversal vulnerability in plugins/ImageManager/backend.php in Xinha 0.96, as used in Jojo 4.4.0, allows remote attackers to delet (no CVSS)
- [CVE-2017-11724](https://cve.now/CVE-2017-11724.md): The ReadMATImage function in coders/mat.c in ImageMagick through 6.9.9-3 and 7.x through 7.0.6-3 has memory leaks involving the quantum\_info (no CVSS)
- [CVE-2017-11725](https://cve.now/CVE-2017-11725.md): The share function in Thycotic Secret Server before 10.2.000019 mishandles the Back Button, leading to unintended redirections. (no CVSS)
- [CVE-2017-11728](https://cve.now/CVE-2017-11728.md): A heap-based buffer over-read was found in the function OpCode (called from decompileSETMEMBER) in util/decompile.c in Ming 0.4.8, which all (no CVSS)
- [CVE-2017-11729](https://cve.now/CVE-2017-11729.md): A heap-based buffer over-read was found in the function OpCode (called from decompileINCR\_DECR line 1440) in util/decompile.c in Ming 0.4.8, (no CVSS)
- [CVE-2017-11730](https://cve.now/CVE-2017-11730.md): A heap-based buffer over-read was found in the function OpCode (called from decompileINCR\_DECR line 1474) in util/decompile.c in Ming 0.4.8, (no CVSS)
- [CVE-2017-11731](https://cve.now/CVE-2017-11731.md): An invalid memory read vulnerability was found in the function OpCode (called from isLogicalOp and decompileIF) in util/decompile.c in Ming (no CVSS)
- [CVE-2017-11732](https://cve.now/CVE-2017-11732.md): A heap-based buffer overflow vulnerability was found in the function dcputs (called from decompileIMPLEMENTS) in util/decompile.c in Ming 0. (no CVSS)
- [CVE-2017-11733](https://cve.now/CVE-2017-11733.md): A null pointer dereference vulnerability was found in the function stackswap (called from decompileSTACKSWAP) in util/decompile.c in Ming 0. (no CVSS)
- [CVE-2017-11734](https://cve.now/CVE-2017-11734.md): A heap-based buffer over-read was found in the function decompileCALLFUNCTION in util/decompile.c in Ming 0.4.8, which allows attackers to c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-07-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.