# CVEs published 2017-07-31

66 CVEs were published on July 31, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-11648](https://cve.now/CVE-2017-11648.md): Techroutes TR 1803-3G Wireless Cellular Router/Modem 2.4.25 devices do not possess any protection against a CSRF vulnerability, as demonstra (no CVSS)
- [CVE-2017-11726](https://cve.now/CVE-2017-11726.md): services/system\_io/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forgery (CSRF), as demonstr (no CVSS)
- [CVE-2017-11727](https://cve.now/CVE-2017-11727.md): services/system\_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution (involv (no CVSS)
- [CVE-2016-9714](https://cve.now/CVE-2016-9714.md): IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could (no CVSS, IBM InfoSphere Master Data Management)
- [CVE-2016-9715](https://cve.now/CVE-2016-9715.md): IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. (no CVSS, IBM InfoSphere Master Data Management)
- [CVE-2016-9716](https://cve.now/CVE-2016-9716.md): IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow (no CVSS, IBM InfoSphere Master Data Management)
- [CVE-2016-9717](https://cve.now/CVE-2016-9717.md): HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. (no CVSS, IBM InfoSphere Master Data Management)
- [CVE-2016-9718](https://cve.now/CVE-2016-9718.md): IBM InfoSphere Master Data Management Server 10.1. (no CVSS, IBM InfoSphere Master Data Management)
- [CVE-2016-9719](https://cve.now/CVE-2016-9719.md): IBM InfoSphere Master Data Management Server 10.1. (no CVSS, IBM InfoSphere Master Data Management)
- [CVE-2017-1227](https://cve.now/CVE-2017-1227.md): IBM Tivoli Endpoint Manager could allow a unauthorized user to consume all resources and crash the system. (no CVSS, IBM BigFix Platform)
- [CVE-2017-1303](https://cve.now/CVE-2017-1303.md): IBM WebSphere Portal and Web Content Manager 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. (CVSS 6.1, IBM WebSphere Portal)
- [CVE-2017-1332](https://cve.now/CVE-2017-1332.md): IBM iNotes 8.5 and 9.0 is vulnerable to cross-site scripting. (no CVSS, IBM iNotes)
- [CVE-2017-1370](https://cve.now/CVE-2017-1370.md): IBM Jazz Reporting Service (JRS) 5.0 and 6.0 could disclose sensitive information, including user credentials, through an error message from (no CVSS, IBM Jazz Reporting Service)
- [CVE-2017-1386](https://cve.now/CVE-2017-1386.md): IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and d (no CVSS, IBM API Connect)
- [CVE-2017-1460](https://cve.now/CVE-2017-1460.md): IBM i OSPF 6.1, 7.1, 7.2, and 7.3 is vulnerable when a rogue router spoofs its origin. (no CVSS, IBM i)
- [CVE-2017-1496](https://cve.now/CVE-2017-1496.md): IBM Sterling B2B Integrator Standard Edition 5.2.x is vulnerable to cross-site scripting. (no CVSS, IBM Sterling B2B Integrator)
- [CVE-2017-11668](https://cve.now/CVE-2017-11668.md): An out-of-bounds read flaw related to the assess\_packet function in eapmd5pass.c:134 was found in the way eapmd5pass 1.4 handled processing (no CVSS)
- [CVE-2017-11669](https://cve.now/CVE-2017-11669.md): An out-of-bounds read flaw related to the assess\_packet function in eapmd5pass.c:211 was found in the way eapmd5pass 1.4 handled processing (no CVSS)
- [CVE-2017-11670](https://cve.now/CVE-2017-11670.md): A length validation (leading to out-of-bounds read and write) flaw was found in the way eapmd5pass 1.4 handled network traffic in the extrac (no CVSS)
- [CVE-2017-11760](https://cve.now/CVE-2017-11760.md): uploadImage.php in ProjeQtOr before 6.3.2 allows remote authenticated users to execute arbitrary PHP code by uploading a .php file composed (no CVSS)
- [CVE-2017-11757](https://cve.now/CVE-2017-11757.md): Heap-based buffer overflow in Actian Pervasive PSQL v12.10 and Zen v13 allows remote attackers to execute arbitrary code via crafted traffic (no CVSS)
- [CVE-2017-11114](https://cve.now/CVE-2017-11114.md): The put\_chars function in html\_r.c in Twibright Links 2.14 allows remote attackers to cause a denial of service (buffer over-read) via a cra (no CVSS)
- [CVE-2017-11115](https://cve.now/CVE-2017-11115.md): The ExifJpegHUFFTable::deriveTable function in ExifHuffmanTable.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2017-11116](https://cve.now/CVE-2017-11116.md): The ExifImageFile::readDQT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-ba (no CVSS)
- [CVE-2017-11117](https://cve.now/CVE-2017-11117.md): The ExifImageFile::readDHT function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (heap-ba (no CVSS)
- [CVE-2017-11118](https://cve.now/CVE-2017-11118.md): The ExifImageFile::readImage function in ExifImageFileRead.cpp in OpenExif 2.1.4 allows remote attackers to cause a denial of service (infin (no CVSS)
- [CVE-2017-11119](https://cve.now/CVE-2017-11119.md): The chk\_mem\_access function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2017-11330](https://cve.now/CVE-2017-11330.md): The DivFixppCore::avi\_header\_fix function in DivFix++Core.cpp in DivFix++ v0.34 allows remote attackers to cause a denial of service (invali (no CVSS)
- [CVE-2017-11331](https://cve.now/CVE-2017-11331.md): The wav\_open function in oggenc/audio.c in Xiph.Org vorbis-tools 1.4.0 allows remote attackers to cause a denial of service (memory allocati (no CVSS)
- [CVE-2017-11332](https://cve.now/CVE-2017-11332.md): The startread function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error an (no CVSS)
- [CVE-2017-11333](https://cve.now/CVE-2017-11333.md): The vorbis\_analysis\_wrote function in lib/block.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (OOM) via (no CVSS)
- [CVE-2017-11359](https://cve.now/CVE-2017-11359.md): The wavwritehdr function in wav.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (divide-by-zero error (no CVSS)
- [CVE-2017-11546](https://cve.now/CVE-2017-11546.md): The insert\_note\_steps function in readmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (divide-by-zero error (no CVSS)
- [CVE-2017-11547](https://cve.now/CVE-2017-11547.md): The resample\_gauss function in resample.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (heap-based buffer over- (no CVSS)
- [CVE-2017-11548](https://cve.now/CVE-2017-11548.md): The \_tokenize\_matrix function in audio\_out.c in Xiph.Org libao 1.2.0 allows remote attackers to cause a denial of service (memory corruption (no CVSS)
- [CVE-2017-11549](https://cve.now/CVE-2017-11549.md): The play\_midi function in playmidi.c in TiMidity++ 2.14.0 allows remote attackers to cause a denial of service (large loop and CPU consumpti (no CVSS)
- [CVE-2017-11550](https://cve.now/CVE-2017-11550.md): The id3\_ucs4\_length function in ucs4.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (NULL Pointer Dereference a (no CVSS)
- [CVE-2017-11551](https://cve.now/CVE-2017-11551.md): The id3\_field\_parse function in field.c in libid3tag 0.15.1b allows remote attackers to cause a denial of service (OOM) via a crafted MP3 fi (no CVSS)
- [CVE-2017-11743](https://cve.now/CVE-2017-11743.md): MEDHOST Connex contains a hard-coded Mirth Connect admin credential that is used for customer Mirth Connect management access. (no CVSS)
- [CVE-2017-9475](https://cve.now/CVE-2017-9475.md): Comcast XFINITY WiFi Home Hotspot devices allow remote attackers to spoof the identities of Comcast customers via a forged MAC address. (no CVSS)
- [CVE-2017-9476](https://cve.now/CVE-2017-9476.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939 (no CVSS)
- [CVE-2017-9477](https://cve.now/CVE-2017-9477.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P2 (no CVSS)
- [CVE-2017-9478](https://cve.now/CVE-2017-9478.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P2 (no CVSS)
- [CVE-2017-9479](https://cve.now/CVE-2017-9479.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to execu (no CVSS)
- [CVE-2017-9480](https://cve.now/CVE-2017-9480.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows local users (e.g., users (no CVSS)
- [CVE-2017-9481](https://cve.now/CVE-2017-9481.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtai (no CVSS)
- [CVE-2017-9482](https://cve.now/CVE-2017-9482.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to obtai (no CVSS)
- [CVE-2017-9483](https://cve.now/CVE-2017-9483.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows Network Processor (NP) Li (no CVSS)
- [CVE-2017-9484](https://cve.now/CVE-2017-9484.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST) and DPC3939 (firmware version dpc3939-P2 (no CVSS)
- [CVE-2017-9485](https://cve.now/CVE-2017-9485.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to write (no CVSS)
- [CVE-2017-9486](https://cve.now/CVE-2017-9486.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) devices allows remote attackers to compu (no CVSS)
- [CVE-2017-9487](https://cve.now/CVE-2017-9487.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941\_2 (no CVSS)
- [CVE-2017-9488](https://cve.now/CVE-2017-9488.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST) and DPC3941T (firmware version DPC3941\_2 (no CVSS)
- [CVE-2017-9489](https://cve.now/CVE-2017-9489.md): The Comcast firmware on Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST) devices allows configuration changes via CSRF. (no CVSS)
- [CVE-2017-9490](https://cve.now/CVE-2017-9490.md): The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682\_2.2p7s2\_PROD\_sey) devices allows co (no CVSS)
- [CVE-2017-9491](https://cve.now/CVE-2017-9491.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939 (no CVSS)
- [CVE-2017-9492](https://cve.now/CVE-2017-9492.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939 (no CVSS)
- [CVE-2017-9493](https://cve.now/CVE-2017-9493.md): The Comcast firmware on Motorola MX011ANM (firmware version MX011AN\_2.9p6s1\_PROD\_sey) devices allows remote attackers to conduct successful (no CVSS)
- [CVE-2017-9494](https://cve.now/CVE-2017-9494.md): The Comcast firmware on Motorola MX011ANM (firmware version MX011AN\_2.9p6s1\_PROD\_sey) devices allows remote attackers to enable a Remote Web (no CVSS)
- [CVE-2017-9495](https://cve.now/CVE-2017-9495.md): The Comcast firmware on Motorola MX011ANM (firmware version MX011AN\_2.9p6s1\_PROD\_sey) devices allows physically proximate attackers to read (no CVSS)
- [CVE-2017-9496](https://cve.now/CVE-2017-9496.md): The Comcast firmware on Motorola MX011ANM (firmware version MX011AN\_2.9p6s1\_PROD\_sey) devices allows physically proximate attackers to acces (no CVSS)
- [CVE-2017-9497](https://cve.now/CVE-2017-9497.md): The Comcast firmware on Motorola MX011ANM (firmware version MX011AN\_2.9p6s1\_PROD\_sey) devices allows physically proximate attackers to execu (no CVSS)
- [CVE-2017-9498](https://cve.now/CVE-2017-9498.md): The Comcast firmware on Motorola MX011ANM (firmware version MX011AN\_2.9p6s1\_PROD\_sey) and Xfinity XR11-20 Voice Remote devices allows local (no CVSS)
- [CVE-2017-9521](https://cve.now/CVE-2017-9521.md): The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939 (no CVSS)
- [CVE-2017-9522](https://cve.now/CVE-2017-9522.md): The Time Warner firmware on Technicolor TC8717T devices sets the default Wi-Fi passphrase to a combination of the SSID and BSSID, which make (no CVSS)
- [CVE-2017-11358](https://cve.now/CVE-2017-11358.md): The read\_samples function in hcom.c in Sound eXchange (SoX) 14.4.2 allows remote attackers to cause a denial of service (invalid memory read (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-07-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.