# CVEs published 2017-08-07

118 CVEs were published on August 7, 2017: 0 critical, 2 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2017-6866](https://cve.now/CVE-2017-6866.md): A vulnerability was discovered in Siemens XHQ server 4 and 5 (4 before V4.7.1.3 and 5 before V5.0.0.2) that could allow an authenticated low (no CVSS, XHQ 4 (All versions before V4.7.1.3), XHQ)
- [CVE-2017-12662](https://cve.now/CVE-2017-12662.md): ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePDFImage in coders/pdf.c. (no CVSS)
- [CVE-2017-12663](https://cve.now/CVE-2017-12663.md): ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMAPImage in coders/map.c. (no CVSS)
- [CVE-2017-12664](https://cve.now/CVE-2017-12664.md): ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePALMImage in coders/palm.c. (no CVSS)
- [CVE-2017-12665](https://cve.now/CVE-2017-12665.md): ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePICTImage in coders/pict.c. (no CVSS)
- [CVE-2017-12666](https://cve.now/CVE-2017-12666.md): ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteINLINEImage in coders/inline.c. (no CVSS)
- [CVE-2017-12667](https://cve.now/CVE-2017-12667.md): ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMATImage in coders\\mat.c. (no CVSS)
- [CVE-2017-12668](https://cve.now/CVE-2017-12668.md): ImageMagick 7.0.6-2 has a memory leak vulnerability in WritePCXImage in coders/pcx.c. (no CVSS)
- [CVE-2017-12669](https://cve.now/CVE-2017-12669.md): ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteCALSImage in coders/cals.c. (no CVSS)
- [CVE-2017-12670](https://cve.now/CVE-2017-12670.md): In ImageMagick 7.0.6-3, missing validation was found in coders/mat.c, leading to an assertion failure in the function DestroyImage in Magick (no CVSS)
- [CVE-2017-12671](https://cve.now/CVE-2017-12671.md): In ImageMagick 7.0.6-3, a missing NULL assignment was found in coders/png.c, leading to an invalid free in the function RelinquishMagickMemo (no CVSS)
- [CVE-2017-12672](https://cve.now/CVE-2017-12672.md): In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which allows attackers to cause (no CVSS)
- [CVE-2017-12673](https://cve.now/CVE-2017-12673.md): In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneMNGImage in coders/png.c, which allows attackers to cau (no CVSS)
- [CVE-2017-12674](https://cve.now/CVE-2017-12674.md): In ImageMagick 7.0.6-2, a CPU exhaustion vulnerability was found in the function ReadPDBImage in coders/pdb.c, which allows attackers to cau (no CVSS)
- [CVE-2017-12675](https://cve.now/CVE-2017-12675.md): In ImageMagick 7.0.6-3, a missing check for multidimensional data was found in coders/mat.c, leading to a memory leak in the function ReadIm (no CVSS)
- [CVE-2017-12676](https://cve.now/CVE-2017-12676.md): In ImageMagick 7.0.6-3, a memory leak vulnerability was found in the function ReadOneJNGImage in coders/png.c, which allows attackers to cau (no CVSS)
- [CVE-2014-1235](https://cve.now/CVE-2014-1235.md): Stack-based buffer overflow in the "yyerror" function in Graphviz 2.34.0 allows remote attackers to execute arbitrary code or cause a denial (no CVSS)
- [CVE-2014-3462](https://cve.now/CVE-2014-3462.md): The ".encfs6.xml" configuration file in encfs before 1.7.5 allows remote attackers to access sensitive data by setting "blockMACBytes" to 0 (no CVSS)
- [CVE-2014-9827](https://cve.now/CVE-2014-9827.md): coders/xpm.c in ImageMagick allows remote attackers to have unspecified impact via a crafted xpm file. (no CVSS)
- [CVE-2014-9828](https://cve.now/CVE-2014-9828.md): coders/psd.c in ImageMagick allows remote attackers to have unspecified impact via a crafted psd file. (no CVSS)
- [CVE-2014-9830](https://cve.now/CVE-2014-9830.md): coders/sun.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted sun file. (no CVSS)
- [CVE-2014-9831](https://cve.now/CVE-2014-9831.md): coders/wpg.c in ImageMagick allows remote attackers to have unspecified impact via a corrupted wpg file. (no CVSS)
- [CVE-2015-5244](https://cve.now/CVE-2015-5244.md): The NSSCipherSuite option with ciphersuites enabled in mod\_nss before 1.0.12 allows remote attackers to bypass application restrictions. (no CVSS)
- [CVE-2015-5946](https://cve.now/CVE-2015-5946.md): Incomplete blacklist vulnerability in SuiteCRM 7.2.2 allows remote authenticated users to execute arbitrary code by uploading a file with an (no CVSS)
- [CVE-2015-7571](https://cve.now/CVE-2015-7571.md): Unrestricted file upload vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary code by uploading a file with an exe (no CVSS)
- [CVE-2015-7691](https://cve.now/CVE-2015-7691.md): The crypto\_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2015-7692](https://cve.now/CVE-2015-7692.md): The crypto\_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2015-7701](https://cve.now/CVE-2015-7701.md): Memory leak in the CRYPTO\_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a den (no CVSS)
- [CVE-2015-7702](https://cve.now/CVE-2015-7702.md): The crypto\_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2015-7704](https://cve.now/CVE-2015-7704.md): The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service via a number of craft (no CVSS)
- [CVE-2015-7705](https://cve.now/CVE-2015-7705.md): The rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to have unspecified impact via a large n (no CVSS)
- [CVE-2015-7849](https://cve.now/CVE-2015-7849.md): Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to possibly exec (no CVSS)
- [CVE-2015-7850](https://cve.now/CVE-2015-7850.md): ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (infinite loop or c (no CVSS)
- [CVE-2015-7852](https://cve.now/CVE-2015-7852.md): ntpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (crash) via crafted mode 6 re (no CVSS)
- [CVE-2015-7853](https://cve.now/CVE-2015-7853.md): The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2015-7854](https://cve.now/CVE-2015-7854.md): Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated us (no CVSS)
- [CVE-2015-7855](https://cve.now/CVE-2015-7855.md): The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2015-7871](https://cve.now/CVE-2015-7871.md): Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication. (no CVSS)
- [CVE-2016-3113](https://cve.now/CVE-2016-3113.md): Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML. (no CVSS)
- [CVE-2016-6220](https://cve.now/CVE-2016-6220.md): Information Disclosure vulnerability in the Dashboard and Error Pages in Trend Micro Control Manager SP3 6.0. (no CVSS)
- [CVE-2016-7976](https://cve.now/CVE-2016-7976.md): The PS Interpreter in Ghostscript 9.18 and 9.20 allows remote attackers to execute arbitrary code via crafted userparams. (no CVSS)
- [CVE-2017-12637](https://cve.now/CVE-2017-12637.md): Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows (CVSS 7.5, KEV)
- [CVE-2017-12655](https://cve.now/CVE-2017-12655.md): Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the query parameter to log.php in a dailylog action. (no CVSS)
- [CVE-2017-12653](https://cve.now/CVE-2017-12653.md): 360 Total Security 9.0.0.1202 before 2017-07-07 allows Privilege Escalation via a Trojan horse Shcore.dll file in any directory in the PATH, (no CVSS)
- [CVE-2017-12654](https://cve.now/CVE-2017-12654.md): The ReadPICTImage function in coders/pict.c in ImageMagick 7.0.6-3 allows attackers to cause a denial of service (memory leak) via a crafted (no CVSS)
- [CVE-2009-5145](https://cve.now/CVE-2009-5145.md): Cross-site scripting (XSS) vulnerability in ZMI pages that use the manage\_tabs\_message in Zope 2.11.4, 2.11.2, 2.10.9, 2.10.7, 2.10.6, 2.10. (no CVSS, zope2)
- [CVE-2011-5325](https://cve.now/CVE-2011-5325.md): Directory traversal vulnerability in the BusyBox implementation of tar before 1.22.0 v5 allows remote attackers to point to files outside th (no CVSS)
- [CVE-2014-9260](https://cve.now/CVE-2014-9260.md): The basic\_settings function in the download manager plugin for WordPress before 2.7.3 allows remote authenticated users to update every Word (no CVSS)
- [CVE-2014-9262](https://cve.now/CVE-2014-9262.md): The Duplicator plugin in Wordpress before 0.5.10 allows remote authenticated users to create and download backup files. (no CVSS)
- [CVE-2015-1378](https://cve.now/CVE-2015-1378.md): cmdlineopts.clp in grml-debootstrap in Debian 0.54, 0.68.x before 0.68.1, 0.7x before 0.78 is sourced without checking that the local direct (no CVSS)
- [CVE-2015-1555](https://cve.now/CVE-2015-1555.md): Zend/Session/SessionManager in Zend Framework 2.2.x before 2.2.9, 2.3.x before 2.3.4 allows remote attackers to create valid sessions withou (no CVSS)
- [CVE-2015-3839](https://cve.now/CVE-2015-3839.md): The updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a denial of service (NULL pointer exception and pr (no CVSS)
- [CVE-2015-7561](https://cve.now/CVE-2015-7561.md): Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image. (no CVSS, k8s.io/kubernetes)
- [CVE-2015-7875](https://cve.now/CVE-2015-7875.md): ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the "edit" permission for the "content type" plugins tha (no CVSS)
- [CVE-2015-7887](https://cve.now/CVE-2015-7887.md): NetApp SnapCenter Server 1.0 allows remote authenticated users to list and delete backups. (no CVSS)
- [CVE-2015-8621](https://cve.now/CVE-2015-8621.md): t-coffee before 11.00.8cbe486-2 allows local users to write to ~/.t\_coffee globally. (no CVSS)
- [CVE-2017-12650](https://cve.now/CVE-2017-12650.md): SQL Injection exists in the Loginizer plugin before 1.3.6 for WordPress via the X-Forwarded-For HTTP header. (no CVSS)
- [CVE-2017-12651](https://cve.now/CVE-2017-12651.md): Cross Site Request Forgery (CSRF) exists in the Blacklist and Whitelist IP Wizard in init.php in the Loginizer plugin before 1.3.6 for WordP (no CVSS)
- [CVE-2016-10404](https://cve.now/CVE-2016-10404.md): XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted redirect field to modules/apps/foundation/frontend-js/frontend-js-spa-web/src/m (no CVSS, com.liferay.portal:release.portal.bom)
- [CVE-2017-12567](https://cve.now/CVE-2017-12567.md): SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.10 (no CVSS)
- [CVE-2017-12645](https://cve.now/CVE-2017-12645.md): XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId. (no CVSS, com.liferay.portal:release.portal.bom)
- [CVE-2017-12646](https://cve.now/CVE-2017-12646.md): XSS exists in Liferay Portal before 7.0 CE GA4 via a login name, password, or e-mail address. (no CVSS, com.liferay.portal:release.portal.bom · com.liferay:com.… +1)
- [CVE-2017-12647](https://cve.now/CVE-2017-12647.md): XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title. (no CVSS, com.liferay.portal:release.portal.bom)
- [CVE-2017-12648](https://cve.now/CVE-2017-12648.md): XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL. (no CVSS, com.liferay.portal:release.portal.bom · com.liferay:com.lif…)
- [CVE-2017-12649](https://cve.now/CVE-2017-12649.md): XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display. (no CVSS, com.liferay.portal:release.portal.bom)
- [CVE-2017-12477](https://cve.now/CVE-2017-12477.md): It was discovered that the bpserverd proprietary protocol in Unitrends Backup (UB) before 10.0.0, as invoked through xinetd, has an issue in (no CVSS)
- [CVE-2017-12478](https://cve.now/CVE-2017-12478.md): It was discovered that the api/storage web interface in Unitrends Backup (UB) before 10.0.0 has an issue in which one of its input parameter (no CVSS)
- [CVE-2017-12479](https://cve.now/CVE-2017-12479.md): It was discovered that an issue in the session logic in Unitrends Backup (UB) before 10.0.0 allowed using the LOGDIR environment variable du (no CVSS)
- [CVE-2017-12640](https://cve.now/CVE-2017-12640.md): ImageMagick 7.0.6-1 has an out-of-bounds read vulnerability in ReadOneMNGImage in coders/png.c. (no CVSS)
- [CVE-2017-12641](https://cve.now/CVE-2017-12641.md): ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadOneJNGImage in coders\\png.c. (no CVSS)
- [CVE-2017-12642](https://cve.now/CVE-2017-12642.md): ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadMPCImage in coders\\mpc.c. (no CVSS)
- [CVE-2017-12643](https://cve.now/CVE-2017-12643.md): ImageMagick 7.0.6-1 has a memory exhaustion vulnerability in ReadOneJNGImage in coders\\png.c. (no CVSS)
- [CVE-2017-12644](https://cve.now/CVE-2017-12644.md): ImageMagick 7.0.6-1 has a memory leak vulnerability in ReadDCMImage in coders\\dcm.c. (no CVSS)
- [CVE-2017-9801](https://cve.now/CVE-2017-9801.md): When a call-site passes a subject for an email that contains line-breaks in Apache Commons Email 1.0 through 1.4, the caller can add arbitra (no CVSS, Apache Software Foundation Apache Commons Email · org.apach…)
- [CVE-2017-7916](https://cve.now/CVE-2017-7916.md): A Permissions, Privileges, and Access Controls issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiF (no CVSS, ABB VSN300 WiFi Logger Card)
- [CVE-2017-7920](https://cve.now/CVE-2017-7920.md): An Improper Authentication issue was discovered in ABB VSN300 WiFi Logger Card versions 1.8.15 and prior, and VSN300 WiFi Logger Card for Re (no CVSS, ABB VSN300 WiFi Logger Card)
- [CVE-2017-7928](https://cve.now/CVE-2017-7928.md): An Improper Access Control issue was discovered in Schweitzer Engineering Laboratories (SEL) SEL-3620 and SEL-3622 Security Gateway Versions (no CVSS, Schweitzer Engineering Laboratories, Inc. SEL-3620 and SEL-…)
- [CVE-2017-7932](https://cve.now/CVE-2017-7932.md): An improper certificate validation issue was discovered in NXP i.MX 28 i.MX 50, i.MX 53, i.MX 7Solo i.MX 7Dual Vybrid VF3xx, Vybrid VF5xx, V (no CVSS, NXP i.MX Product Family)
- [CVE-2017-7936](https://cve.now/CVE-2017-7936.md): A stack-based buffer overflow issue was discovered in NXP i.MX 50, i.MX 53, i.MX 6ULL, i.MX 6UltraLite, i.MX 6SoloLite, i.MX 6Solo, i.MX 6Du (no CVSS, NXP i.MX Product Family)
- [CVE-2017-9630](https://cve.now/CVE-2017-9630.md): An Improper Authentication issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, all versions, (no CVSS, PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch)
- [CVE-2017-9632](https://cve.now/CVE-2017-9632.md): A Missing Encryption of Sensitive Data issue was discovered in PDQ Manufacturing LaserWash G5 and G5 S Series all versions, LaserWash M5, al (no CVSS, PDQ Manufacturing, Inc. LaserWash, Laser Jet and ProTouch)
- [CVE-2017-9633](https://cve.now/CVE-2017-9633.md): An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in the Continental AG Infineon S-Gold 2 (PMB (CVSS 8.8, Continental AG Infineon S-Gold)
- [CVE-2017-9647](https://cve.now/CVE-2017-9647.md): A Stack-Based Buffer Overflow issue was discovered in the Continental AG Infineon S-Gold 2 (PMB 8876) chipset on BMW several models produced (no CVSS, Continental AG Infineon S-Gold)
- [CVE-2011-4650](https://cve.now/CVE-2011-4650.md): Cisco Data Center Network Manager is affected by Excessive Logging During a TCP Flood on Java Ports. (no CVSS)
- [CVE-2017-6663](https://cve.now/CVE-2017-6663.md): A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent (CVSS 6.5, KEV, Cisco IOS and IOS XE)
- [CVE-2017-6664](https://cve.now/CVE-2017-6664.md): A vulnerability in the Autonomic Networking feature of Cisco IOS XE Software could allow an unauthenticated, remote, autonomic node to acces (no CVSS, Cisco IOS XE)
- [CVE-2017-6665](https://cve.now/CVE-2017-6665.md): A vulnerability in the Autonomic Networking feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, adjacent (no CVSS, Cisco IOS and IOS XE)
- [CVE-2017-6745](https://cve.now/CVE-2017-6745.md): A vulnerability in the cache server within Cisco Videoscape Distribution Suite (VDS) for Television 3.2(5)ES1 could allow an unauthenticated (no CVSS, Cisco Videoscape Distribution Suite Cache Server)
- [CVE-2017-6747](https://cve.now/CVE-2017-6747.md): A vulnerability in the authentication module of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypa (no CVSS, Cisco Identity Services Engine)
- [CVE-2017-6752](https://cve.now/CVE-2017-6752.md): A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) 9.3(3) and 9.6(2) could allow an unauthenticated, remote (no CVSS, Cisco Adaptive Security Appliance)
- [CVE-2017-6754](https://cve.now/CVE-2017-6754.md): A vulnerability in the web-based management interface of the Cisco Smart Net Total Care (SNTC) Software Collector Appliance 3.11 could allow (no CVSS, Cisco Smart Net Total Care Software Collector Appliance)
- [CVE-2017-6756](https://cve.now/CVE-2017-6756.md): A vulnerability in the Web UI Application of the Cisco Prime Collaboration Provisioning Tool through 12.2 could allow an unauthenticated, re (no CVSS, Cisco Prime Collaboration Provisioning Tool)
- [CVE-2017-6757](https://cve.now/CVE-2017-6757.md): A vulnerability in Cisco Unified Communications Manager 10.5(2.10000.5), 11.0(1.10000.10), and 11.5(1.10000.6) could allow an authenticated, (no CVSS, Cisco Unified Communications Manager)
- [CVE-2017-6758](https://cve.now/CVE-2017-6758.md): A vulnerability in the web framework of Cisco Unified Communications Manager 11.5(1.10000.6) could allow an authenticated, remote attacker t (no CVSS, Cisco Unified Communications Manager)
- [CVE-2017-6759](https://cve.now/CVE-2017-6759.md): A vulnerability in the UpgradeManager of the Cisco Prime Collaboration Provisioning Tool 12.1 could allow an authenticated, remote attacker (no CVSS, Cisco Prime Collaboration Provisioning Tool)
- [CVE-2017-6761](https://cve.now/CVE-2017-6761.md): A vulnerability in the web-based management interface of Cisco Finesse 10.6(1) and 11.5(1) could allow an unauthenticated, remote attacker t (no CVSS, Cisco Finesse)
- [CVE-2017-6762](https://cve.now/CVE-2017-6762.md): A vulnerability in the web-based management interface of Cisco Jabber Guest Server 10.6(9), 11.0(0), and 11.0(1) could allow an unauthentica (no CVSS, Cisco Jabber Guest Server)
- [CVE-2017-6763](https://cve.now/CVE-2017-6763.md): A vulnerability in the implementation of the H.264 protocol in Cisco Meeting Server (CMS) 2.1.4 could allow an unauthenticated, remote attac (no CVSS, Cisco Meeting Server)
- [CVE-2017-6764](https://cve.now/CVE-2017-6764.md): A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.5(1) could allow an authenticated, remote (no CVSS, Cisco Adaptive Security Appliance)
- [CVE-2017-6765](https://cve.now/CVE-2017-6765.md): A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) 9.1(6.11) and 9.4(1.2) could allow an unaut (no CVSS, Cisco Adaptive Security Appliance)
- [CVE-2017-6766](https://cve.now/CVE-2017-6766.md): A vulnerability in the Secure Sockets Layer (SSL) Decryption and Inspection feature of Cisco Firepower System Software 5.4.0, 5.4.1, 6.0.0, (no CVSS, Cisco Firepower System Software)
- [CVE-2017-6769](https://cve.now/CVE-2017-6769.md): A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote a (no CVSS, Cisco Access Control System)
- [CVE-2017-6770](https://cve.now/CVE-2017-6770.md): Cisco IOS 12.0 through 15.6, Adaptive Security Appliance (ASA) Software 7.0.1 through 9.7.1.2, NX-OS 4.0 through 12.0, and IOS XE 3.6 throug (no CVSS, Multiple Cisco Products)
- [CVE-2006-3635](https://cve.now/CVE-2006-3635.md): The ia64 subsystem in the Linux kernel before 2.6.26 allows local users to cause a denial of service (stack consumption and system crash) vi (no CVSS)
- [CVE-2017-6418](https://cve.now/CVE-2017-6418.md): libclamav/message.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted e-mail message. (no CVSS)
- [CVE-2017-6419](https://cve.now/CVE-2017-6419.md): mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overf (no CVSS)
- [CVE-2017-6420](https://cve.now/CVE-2017-6420.md): The wwunpack function in libclamav/wwunpack.c in ClamAV 0.99.2 allows remote attackers to cause a denial of service (use-after-free) via a c (no CVSS)
- [CVE-2017-12596](https://cve.now/CVE-2017-12596.md): In OpenEXR 2.2.0, a crafted image causes a heap-based buffer over-read in the hufDecode function in IlmImf/ImfHuf.cpp during exrmaketiled ex (no CVSS)
- [CVE-2017-12597](https://cve.now/CVE-2017-12597.md): OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when re (no CVSS, opencv-python · opencv-contrib-python)
- [CVE-2017-12598](https://cve.now/CVE-2017-12598.md): OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modul (no CVSS, opencv-python · opencv-contrib-python)
- [CVE-2017-12599](https://cve.now/CVE-2017-12599.md): OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds read error in the function icvCvt\_BGRA2BGR\_8u\_C4C3R when readi (no CVSS, opencv-python · opencv-contrib-python)
- [CVE-2017-12600](https://cve.now/CVE-2017-12600.md): OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (CPU consumption) issue, as demonstrated by the 11-opencv-d (no CVSS, opencv-python · opencv-contrib-python)
- [CVE-2017-12601](https://cve.now/CVE-2017-12601.md): OpenCV (Open Source Computer Vision Library) through 3.3 has a buffer overflow in the cv::BmpDecoder::readData function in modules/imgcodecs (no CVSS, opencv-contrib-python · opencv-python)
- [CVE-2017-12602](https://cve.now/CVE-2017-12602.md): OpenCV (Open Source Computer Vision Library) through 3.3 has a denial of service (memory consumption) issue, as demonstrated by the 10-openc (no CVSS, opencv-python · opencv-contrib-python)
- [CVE-2017-12603](https://cve.now/CVE-2017-12603.md): OpenCV (Open Source Computer Vision Library) through 3.3 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodec (no CVSS, opencv-contrib-python · opencv-python)
- [CVE-2017-12604](https://cve.now/CVE-2017-12604.md): OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillUniColor function in utils.cpp when rea (no CVSS, opencv-python · opencv-contrib-python)
- [CVE-2017-12605](https://cve.now/CVE-2017-12605.md): OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the FillColorRow8 function in utils.cpp when re (no CVSS, opencv-contrib-python · opencv-python)
- [CVE-2017-12606](https://cve.now/CVE-2017-12606.md): OpenCV (Open Source Computer Vision Library) through 3.3 has an out-of-bounds write error in the function FillColorRow4 in utils.cpp when re (no CVSS, opencv-contrib-python · opencv-python)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-08-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.