CVEs published August 17, 2017
35 CVEs were published on August 17, 2017: 0 critical, 0 high.
- Published
- 35
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 35
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Cisco Systems Elastic Services Controller
- 4
- Cisco Systems StarOS for ASR 5000 Series Aggregated Service…
- 3
- Cisco Systems Application Policy Infrastructure Controller
- 2
- Cisco Systems AnyConnect WebLaunch
- 1
- Cisco Systems Policy Suite
- 1
- Cisco Systems Prime Infrastructure
- 1
- Cisco Systems RV340, RV345, and RV345P Dual WAN Gigabit VPN…
- 1
- Cisco Systems TelePresence Video Communication Server
- 1
- Cisco Systems Ultra Services Framework
- 1
- Cisco Systems Ultra Services Platform
- 1
Medium, low and unrated 35
- CVE-2017-12907Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the url path to usersearch.php.
- CVE-2017-12908SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr para
- CVE-2017-12909SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid paramete
- CVE-2017-12910SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter.
- CVE-2017-6710A vulnerability in the Cisco Virtual Network Function (VNF) Element Manager could allow an authenticated, remote attacker to elevate privileCisco Systems Virtual Network Function (VNF) Element Manager
- CVE-2017-6767A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to gain higher prCisco Systems Application Policy Infrastructure Controller
- CVE-2017-6768A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application Policy InfrastructureCisco Systems Application Policy Infrastructure Controller
- CVE-2017-6771A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to acquCisco Systems Ultra Services Framework
- CVE-2017-6772A vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to view sensitive information.Cisco Systems Elastic Services Controller
- CVE-2017-6773A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an autCisco Systems StarOS for ASR 5000 Series Aggregated Service…
- CVE-2017-6774A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated,Cisco Systems StarOS for ASR 5000 Series Aggregated Service…
- CVE-2017-6775A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an autCisco Systems StarOS for ASR 5000 Series Aggregated Service…
- CVE-2017-6776A vulnerability in the web framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to conduct aCisco Systems Elastic Services Controller
- CVE-2017-6777A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to acquire Cisco Systems Elastic Services Controller
- CVE-2017-6778A vulnerability in the Elastic Services Controller (ESC) web interface of the Cisco Ultra Services Platform could allow an authenticated, reCisco Systems Ultra Services Platform
- CVE-2017-6781A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticatCisco Systems Policy Suite
- CVE-2017-6782A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to modify a Cisco Systems Prime Infrastructure
- CVE-2017-6783A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management Cisco Systems Web Security Appliance · Cisco Systems Ema… +1
- CVE-2017-6784A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remoCisco Systems RV340, RV345, and RV345P Dual WAN Gigabit VPN…
- CVE-2017-6785A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, Cisco Systems Unified Communications Manager
- CVE-2017-6786A vulnerability in Cisco Elastic Services Controller could allow an authenticated, local, unprivileged attacker to access sensitive informatCisco Systems Elastic Services Controller
- CVE-2017-6788The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticatedCisco Systems AnyConnect WebLaunch
- CVE-2017-6790A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) could allow an unauthentCisco Systems TelePresence Video Communication Server
- CVE-2017-7555Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings.Red Hat augeas
- CVE-2017-7556Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their weRed Hat hawtio · io.hawt:project
- CVE-2011-0469Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011.Micro Focus openSUSE
- CVE-2017-11661The _WM_SetupMidiEvent function in internal_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application
- CVE-2017-11662The _WM_ParseNewMidi function in f_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a
- CVE-2017-11663The _WM_SetupMidiEvent function in internal_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application
- CVE-2017-11664The _WM_SetupMidiEvent function in internal_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application
- CVE-2017-12441The row_is_empty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) vi
- CVE-2017-12442The row_is_empty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) vi
- CVE-2017-12443The mdjvu_bitmap_pack_row function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read and application cras
- CVE-2017-12444The mdjvu_bitmap_get_bounding_box function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read and applicat
- CVE-2017-12445The JB2BitmapCoder::code_row_by_refinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of service (invalid memory read a