# CVEs published 2017-08-06

10 CVEs were published on August 6, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-10677](https://cve.now/CVE-2017-10677.md): Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demonstrated by a request (no CVSS)
- [CVE-2017-12587](https://cve.now/CVE-2017-12587.md): ImageMagick 7.0.6-1 has a large loop vulnerability in the ReadPWPImage function in coders\\pwp.c. (no CVSS)
- [CVE-2017-12588](https://cve.now/CVE-2017-12588.md): The zmq3 input and output modules in rsyslog before 8.28.0 interpreted description fields as format strings, possibly allowing a format stri (no CVSS)
- [CVE-2017-12480](https://cve.now/CVE-2017-12480.md): Sandboxie installer 5071703 has a DLL Hijacking or Unsafe DLL Loading Vulnerability via a Trojan horse dwmapi.dll or profapi.dll file in an (no CVSS)
- [CVE-2017-12583](https://cve.now/CVE-2017-12583.md): DokuWiki through 2017-02-19b has XSS in the at parameter (aka the DATE\_AT variable) to doku.php. (no CVSS)
- [CVE-2017-12584](https://cve.now/CVE-2017-12584.md): There is no CSRF mitigation in SLiMS 8 Akasia through 8.3.1. (no CVSS)
- [CVE-2017-12585](https://cve.now/CVE-2017-12585.md): SLiMS 8 Akasia through 8.3.1 has SQL injection in admin/AJAX\_lookup\_handler.php (tableName and tableFields parameters), admin/AJAX\_check\_id. (no CVSS)
- [CVE-2017-12586](https://cve.now/CVE-2017-12586.md): SLiMS 8 Akasia through 8.3.1 has an arbitrary file reading issue because of directory traversal in the url parameter to admin/help.php. (no CVSS)
- [CVE-2017-12581](https://cve.now/CVE-2017-12581.md): GitHub Electron before 1.6.8 allows remote command execution because of a nodeIntegration bypass vulnerability. (no CVSS, electron)
- [CVE-2017-12568](https://cve.now/CVE-2017-12568.md): Denial of Service vulnerability in Debut embedded httpd 1.20 in Brother DCP-J132W (and probably other DCP models) allows remote attackers to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-08-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.