# CVEs published 2017-08-04

38 CVEs were published on August 4, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-12481](https://cve.now/CVE-2017-12481.md): The find\_option function in option.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and (no CVSS)
- [CVE-2017-12482](https://cve.now/CVE-2017-12482.md): The ledger::parse\_date\_mask\_routine function in times.cc in Ledger 3.1.1 allows remote attackers to cause a denial of service (stack-based b (no CVSS)
- [CVE-2017-10815](https://cve.now/CVE-2017-10815.md): MaLion for Windows 5.2.1 and earlier (only when "Remote Control" is installed) and MaLion for Mac 4.0.1 to 5.2.1 (only when "Remote Control" (no CVSS, Intercom MaLion for Windows · Intercom MaLion for Mac)
- [CVE-2017-10816](https://cve.now/CVE-2017-10816.md): SQL injection vulnerability in the MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to execute arbitrary SQL commands via R (no CVSS, Intercom MaLion for Windows and Mac)
- [CVE-2017-10817](https://cve.now/CVE-2017-10817.md): MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to bypass authentication to alter settings in Relay Service Server. (no CVSS, Intercom MaLion for Windows and Mac)
- [CVE-2017-10818](https://cve.now/CVE-2017-10818.md): MaLion for Windows and Mac versions 3.2.1 to 5.2.1 uses a hardcoded cryptographic key which may allow an attacker to alter the connection se (no CVSS, Intercom MaLion for Windows and Mac)
- [CVE-2017-10819](https://cve.now/CVE-2017-10819.md): MaLion for Mac 4.3.0 to 5.2.1 does not properly validate certificates, which may allow an attacker to eavesdrop on an encrypted communicatio (no CVSS, Intercom MaLion for Mac)
- [CVE-2017-10820](https://cve.now/CVE-2017-10820.md): Untrusted search path vulnerability in Installer of IP Messenger for Win 4.60 and earlier allows an attacker to gain privileges via a Trojan (no CVSS, H.Shirouzu / Asahi Net Installer of IP Messenger for Win)
- [CVE-2017-1331](https://cve.now/CVE-2017-1331.md): IBM Content Navigator 2.0.3 and 3.0.0 is vulnerable to cross-site scripting. (no CVSS, IBM Content Navigator)
- [CVE-2017-2221](https://cve.now/CVE-2017-2221.md): Untrusted search path vulnerability in Installer of Baidu IME Ver3.6.1.6 and earlier allows an attacker to gain privileges via a Trojan hors (no CVSS, Baidu Japan Installer of Baidu IME)
- [CVE-2017-10949](https://cve.now/CVE-2017-10949.md): Directory Traversal in Dell Storage Manager 2016 R2.1 causes Information Disclosure when the doGet method of the EmWebsiteServlet class does (no CVSS, Zero Day Initiative Dell Storage Manager)
- [CVE-2017-12448](https://cve.now/CVE-2017-12448.md): The bfd\_cache\_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 an (no CVSS)
- [CVE-2017-12449](https://cve.now/CVE-2017-12449.md): The \_bfd\_vms\_save\_sized\_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binuti (no CVSS)
- [CVE-2017-12450](https://cve.now/CVE-2017-12450.md): The alpha\_vms\_object\_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils (no CVSS)
- [CVE-2017-12451](https://cve.now/CVE-2017-12451.md): The \_bfd\_xcoff\_read\_ar\_hdr function in bfd/coff-rs6000.c and bfd/coff64-rs6000.c in the Binary File Descriptor (BFD) library (aka libbfd), a (no CVSS)
- [CVE-2017-12452](https://cve.now/CVE-2017-12452.md): The bfd\_mach\_o\_i386\_canonicalize\_one\_reloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distri (no CVSS)
- [CVE-2017-12453](https://cve.now/CVE-2017-12453.md): The \_bfd\_vms\_slurp\_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 a (no CVSS)
- [CVE-2017-12454](https://cve.now/CVE-2017-12454.md): The \_bfd\_vms\_slurp\_egsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils (no CVSS)
- [CVE-2017-12455](https://cve.now/CVE-2017-12455.md): The evax\_bfd\_print\_emh function in vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 (no CVSS)
- [CVE-2017-12456](https://cve.now/CVE-2017-12456.md): The read\_symbol\_stabs\_debugging\_info function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds (no CVSS)
- [CVE-2017-12457](https://cve.now/CVE-2017-12457.md): The bfd\_make\_section\_with\_flags function in section.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binuti (no CVSS)
- [CVE-2017-12458](https://cve.now/CVE-2017-12458.md): The nlm\_swap\_auxiliary\_headers\_in function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU (no CVSS)
- [CVE-2017-12459](https://cve.now/CVE-2017-12459.md): The bfd\_mach\_o\_read\_symtab\_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU B (no CVSS)
- [CVE-2017-11657](https://cve.now/CVE-2017-11657.md): Dashlane might allow local users to gain privileges by placing a Trojan horse WINHTTP.dll in the %APPDATA%\\Dashlane directory. (no CVSS)
- [CVE-2017-12413](https://cve.now/CVE-2017-12413.md): AXIS 2100 devices 2.43 have XSS via the URI, possibly related to admin/admin.shtml. (no CVSS)
- [CVE-2017-12428](https://cve.now/CVE-2017-12428.md): In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cause (no CVSS)
- [CVE-2017-12429](https://cve.now/CVE-2017-12429.md): In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers t (no CVSS)
- [CVE-2017-12430](https://cve.now/CVE-2017-12430.md): In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadMPCImage in coders/mpc.c, which allows attackers to (no CVSS)
- [CVE-2017-12431](https://cve.now/CVE-2017-12431.md): In ImageMagick 7.0.6-1, a use-after-free vulnerability was found in the function ReadWMFImage in coders/wmf.c, which allows attackers to cau (no CVSS)
- [CVE-2017-12432](https://cve.now/CVE-2017-12432.md): In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadPCXImage in coders/pcx.c, which allows attackers to (no CVSS)
- [CVE-2017-12433](https://cve.now/CVE-2017-12433.md): In ImageMagick 7.0.6-1, a memory leak vulnerability was found in the function ReadPESImage in coders/pes.c, which allows attackers to cause (no CVSS)
- [CVE-2017-12434](https://cve.now/CVE-2017-12434.md): In ImageMagick 7.0.6-1, a missing NULL check vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to (no CVSS)
- [CVE-2017-12435](https://cve.now/CVE-2017-12435.md): In ImageMagick 7.0.6-1, a memory exhaustion vulnerability was found in the function ReadSUNImage in coders/sun.c, which allows attackers to (no CVSS)
- [CVE-2017-12424](https://cve.now/CVE-2017-12424.md): In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. (no CVSS)
- [CVE-2017-12425](https://cve.now/CVE-2017-12425.md): An issue was discovered in Varnish HTTP Cache 4.0.1 through 4.0.4, 4.1.0 through 4.1.7, 5.0.0, and 5.1.0 through 5.1.2. (no CVSS)
- [CVE-2017-12427](https://cve.now/CVE-2017-12427.md): The ProcessMSLScript function in coders/msl.c in ImageMagick before 6.9.9-5 and 7.x before 7.0.6-5 allows remote attackers to cause a denial (no CVSS)
- [CVE-2015-9107](https://cve.now/CVE-2015-9107.md): Zoho ManageEngine OpManager 11 through 12.2 uses a custom encryption algorithm to protect the credential used to access the monitored device (no CVSS)
- [CVE-2017-12418](https://cve.now/CVE-2017-12418.md): ImageMagick 7.0.6-5 has memory leaks in the parse8BIMW and format8BIM functions in coders/meta.c, related to the WriteImage function in Magi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-08-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.