# CVEs published 2017-08-18

176 CVEs were published on August 18, 2017: 0 critical, 1 high. Days are UTC.

- [CVE-2017-12955](https://cve.now/CVE-2017-12955.md): There is a heap-based buffer overflow in basicio.cpp of Exiv2 0.26. (no CVSS)
- [CVE-2017-12956](https://cve.now/CVE-2017-12956.md): There is an illegal address access in Exiv2::FileIo::path\[abi:cxx11\]() in basicio.cpp of libexiv2 in Exiv2 0.26 that will lead to remote den (no CVSS)
- [CVE-2017-12957](https://cve.now/CVE-2017-12957.md): There is a heap-based buffer over-read in libexiv2 in Exiv2 0.26 that is triggered in the Exiv2::Image::io function in image.cpp. (no CVSS)
- [CVE-2017-12958](https://cve.now/CVE-2017-12958.md): There is an illegal address access in the function output\_hex() in data/data-out.c of the libpspp library in GNU PSPP before 1.0.1 that will (no CVSS)
- [CVE-2017-12959](https://cve.now/CVE-2017-12959.md): There is a reachable assertion abort in the function dict\_add\_mrset() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 t (no CVSS)
- [CVE-2017-12960](https://cve.now/CVE-2017-12960.md): There is a reachable assertion abort in the function dict\_rename\_var() in data/dictionary.c of the libpspp library in GNU PSPP before 1.0.1 (no CVSS)
- [CVE-2017-12961](https://cve.now/CVE-2017-12961.md): There is an assertion abort in the function parse\_attributes() in data/sys-file-reader.c of the libpspp library in GNU PSPP before 1.0.1 tha (no CVSS)
- [CVE-2017-12962](https://cve.now/CVE-2017-12962.md): There are memory leaks in LibSass 3.4.5 triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, l (no CVSS)
- [CVE-2017-12963](https://cve.now/CVE-2017-12963.md): There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack. (no CVSS)
- [CVE-2017-12964](https://cve.now/CVE-2017-12964.md): There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cpp. (no CVSS)
- [CVE-2007-5199](https://cve.now/CVE-2007-5199.md): A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact. (no CVSS)
- [CVE-2007-5341](https://cve.now/CVE-2007-5341.md): Remote code execution in the Venkman script debugger in Mozilla Firefox before 2.0.0.8. (no CVSS)
- [CVE-2017-8445](https://cve.now/CVE-2017-8445.md): An error was found in the X-Pack Security TLS trust manager for versions 5.0.0 to 5.5.1. (no CVSS, Elastic X-Pack Security)
- [CVE-2017-8446](https://cve.now/CVE-2017-8446.md): The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersona (no CVSS, Elastic X-Pack Reporting · org.elasticsearch.plugin:x-pack)
- [CVE-2017-11160](https://cve.now/CVE-2017-11160.md): Multiple untrusted search path vulnerabilities in installer in Synology Assistant before 6.1-15163 on Windows allows local attackers to exec (no CVSS)
- [CVE-2017-3756](https://cve.now/CVE-2017-3756.md): A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. (no CVSS, Lenovo Group ThinkPad Active Protection System)
- [CVE-2017-7364](https://cve.now/CVE-2017-7364.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in function \_\_mdss\_fb\_copy\_destscaler\_data(), variable ds\_da (no CVSS, All Qualcomm products)
- [CVE-2017-9678](https://cve.now/CVE-2017-9678.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in a video driver, memory corruption can potentially occur d (no CVSS, All Qualcomm products)
- [CVE-2017-9679](https://cve.now/CVE-2017-9679.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, if a userspace string is not NULL-terminated, kernel memory (no CVSS, All Qualcomm products)
- [CVE-2017-9680](https://cve.now/CVE-2017-9680.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, if a pointer argument coming from userspace is invalid, a dr (no CVSS, All Qualcomm products)
- [CVE-2017-9682](https://cve.now/CVE-2017-9682.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in two KGSL driver functions can lead to a (no CVSS, All Qualcomm products)
- [CVE-2017-9684](https://cve.now/CVE-2017-9684.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a USB driver can lead to a Use After Fre (no CVSS, All Qualcomm products)
- [CVE-2017-9685](https://cve.now/CVE-2017-9685.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition in a WLAN driver can lead to a Use After Fr (no CVSS, All Qualcomm products)
- [CVE-2014-3451](https://cve.now/CVE-2014-3451.md): OpenFire XMPP Server before 3.10 accepts self-signed certificates, which allows remote attackers to perform unspecified spoofing attacks. (no CVSS)
- [CVE-2014-9411](https://cve.now/CVE-2014-9411.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially pos (no CVSS, All Qualcomm products)
- [CVE-2014-9968](https://cve.now/CVE-2014-9968.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the UIMDIAG interf (no CVSS, All Qualcomm products)
- [CVE-2014-9969](https://cve.now/CVE-2014-9969.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, the GPS client may use an insecure cryptographic algorithm. (no CVSS, All Qualcomm products)
- [CVE-2014-9971](https://cve.now/CVE-2014-9971.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts causes an instruction inside of an assert (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2014-9972](https://cve.now/CVE-2014-9972.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, disabling asserts can potentially cause a NULL pointer deref (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2014-9973](https://cve.now/CVE-2014-9973.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of a buffer length was missing in a PlayReady DRM (no CVSS, All Qualcomm products)
- [CVE-2014-9974](https://cve.now/CVE-2014-9974.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths was missing in Keymaster. (no CVSS, All Qualcomm products)
- [CVE-2014-9975](https://cve.now/CVE-2014-9975.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a rollback vulnerability potentially exists in Full Disk Enc (no CVSS, All Qualcomm products)
- [CVE-2014-9976](https://cve.now/CVE-2014-9976.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2014-9977](https://cve.now/CVE-2014-9977.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in PlayReady DRM. (no CVSS, All Qualcomm products)
- [CVE-2014-9978](https://cve.now/CVE-2014-9978.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE service. (no CVSS, All Qualcomm products)
- [CVE-2014-9979](https://cve.now/CVE-2014-9979.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a variable is uninitialized in a TrustZone system call poten (no CVSS, All Qualcomm products)
- [CVE-2014-9980](https://cve.now/CVE-2014-9980.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a Sample App failed to check a length potentially leading to (no CVSS, All Qualcomm products)
- [CVE-2014-9981](https://cve.now/CVE-2014-9981.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an overflow check in the USB interface was insufficient duri (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2015-0574](https://cve.now/CVE-2015-0574.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, the validation of filesystem access was insufficient. (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2015-0575](https://cve.now/CVE-2015-0575.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, insecure ciphersuites were included in the default configura (no CVSS, All Qualcomm products)
- [CVE-2015-0576](https://cve.now/CVE-2015-0576.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in HSDPA. (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2015-2675](https://cve.now/CVE-2015-2675.md): The OAuth implementation in librest before 0.7.93 incorrectly truncates the pointer returned by the rest\_proxy\_call\_get\_url function, which (no CVSS)
- [CVE-2015-4071](https://cve.now/CVE-2015-4071.md): The Helpdesk Pro Plugin before 1.4.0 for Joomla! allows remote attackers to read the support tickets of arbitrary users via obtaining the ta (no CVSS)
- [CVE-2015-4464](https://cve.now/CVE-2015-4464.md): Kguard Digital Video Recorder 104, 108, v2 does not have any authorization or authentication between an ActiveX client and the application s (no CVSS)
- [CVE-2015-5057](https://cve.now/CVE-2015-5057.md): Cross-site scripting (XSS) vulnerability exists in the Wordpress admin panel when the Broken Link Checker plugin before 1.10.9 is installed. (no CVSS)
- [CVE-2015-5081](https://cve.now/CVE-2015-5081.md): Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privil (no CVSS, django-cms)
- [CVE-2015-5153](https://cve.now/CVE-2015-5153.md): Pulp does not remove permissions for named objects upon deletion, which allows authenticated users to gain the privileges of a deleted objec (no CVSS)
- [CVE-2015-8592](https://cve.now/CVE-2015-8592.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not validated prior to being dereferenced poten (no CVSS, All Qualcomm products)
- [CVE-2015-8593](https://cve.now/CVE-2015-8593.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in 1x call processing (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2015-8594](https://cve.now/CVE-2015-8594.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in RFA-1x. (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2015-8595](https://cve.now/CVE-2015-8595.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in digital televisio (no CVSS, All Qualcomm products)
- [CVE-2015-8596](https://cve.now/CVE-2015-8596.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, validation of buffer lengths is missing in malware protectio (no CVSS, All Qualcomm products)
- [CVE-2015-9034](https://cve.now/CVE-2015-9034.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a string can fail to be null-terminated in SIP leading to a (no CVSS, All Qualcomm products)
- [CVE-2015-9035](https://cve.now/CVE-2015-9035.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a memory buffer fails to be freed after it is no longer need (no CVSS, All Qualcomm products)
- [CVE-2015-9036](https://cve.now/CVE-2015-9036.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an incorrect length is used to clear a memory buffer resulti (no CVSS, All Qualcomm products)
- [CVE-2015-9037](https://cve.now/CVE-2015-9037.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read may occur in the processing of a downlink (no CVSS, All Qualcomm products)
- [CVE-2015-9038](https://cve.now/CVE-2015-9038.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer may be dereferenced in the front end. (no CVSS, All Qualcomm products)
- [CVE-2015-9039](https://cve.now/CVE-2015-9039.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in eMBMS where an assertion can be re (no CVSS, All Qualcomm products)
- [CVE-2015-9040](https://cve.now/CVE-2015-9040.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in a GERAN API. (no CVSS, All Qualcomm products)
- [CVE-2015-9041](https://cve.now/CVE-2015-9041.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when performing WCDMA (no CVSS, All Qualcomm products)
- [CVE-2015-9042](https://cve.now/CVE-2015-9042.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists when processing a QMI (no CVSS, All Qualcomm products)
- [CVE-2015-9043](https://cve.now/CVE-2015-9043.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced upon the expiry of a time (no CVSS, All Qualcomm products)
- [CVE-2015-9044](https://cve.now/CVE-2015-9044.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reac (no CVSS, All Qualcomm products)
- [CVE-2015-9045](https://cve.now/CVE-2015-9045.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GERAN where a buffer can be overfl (no CVSS, All Qualcomm products)
- [CVE-2015-9046](https://cve.now/CVE-2015-9046.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reac (no CVSS, All Qualcomm products)
- [CVE-2015-9047](https://cve.now/CVE-2015-9047.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in GNSS when performing a scan after (no CVSS, All Qualcomm products)
- [CVE-2015-9048](https://cve.now/CVE-2015-9048.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of lost RTP packets (no CVSS, All Qualcomm products)
- [CVE-2015-9049](https://cve.now/CVE-2015-9049.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in the processing of certain response (no CVSS, All Qualcomm products)
- [CVE-2015-9050](https://cve.now/CVE-2015-9050.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists where an array out of bounds access c (no CVSS, All Qualcomm products)
- [CVE-2015-9051](https://cve.now/CVE-2015-9051.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reac (no CVSS, All Qualcomm products)
- [CVE-2015-9052](https://cve.now/CVE-2015-9052.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a vulnerability exists in LTE where an assertion can be reac (no CVSS, All Qualcomm products)
- [CVE-2015-9053](https://cve.now/CVE-2015-9053.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the processing of (no CVSS, All Qualcomm products)
- [CVE-2015-9054](https://cve.now/CVE-2015-9054.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a NULL pointer can be dereferenced during GAL decoding. (no CVSS, All Qualcomm products)
- [CVE-2015-9055](https://cve.now/CVE-2015-9055.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a memory managemen (no CVSS, All Qualcomm products)
- [CVE-2015-9060](https://cve.now/CVE-2015-9060.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a pointer is not properly validated in a QTEE system call. (no CVSS, All Qualcomm products)
- [CVE-2015-9061](https://cve.now/CVE-2015-9061.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, playReady DRM failed to check a length potentially leading t (no CVSS, All Qualcomm products)
- [CVE-2015-9062](https://cve.now/CVE-2015-9062.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists (no CVSS, All Qualcomm products)
- [CVE-2015-9063](https://cve.now/CVE-2015-9063.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a procedure involv (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2015-9064](https://cve.now/CVE-2015-9064.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send IMEI or IMEISV to the network on a network r (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2015-9065](https://cve.now/CVE-2015-9065.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a UE can respond to a UEInformationRequest before Access Str (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2015-9066](https://cve.now/CVE-2015-9066.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in an Inter-RAT proce (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2015-9067](https://cve.now/CVE-2015-9067.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a potential compiler optimization of memset() is addressed. (no CVSS, All Qualcomm products)
- [CVE-2015-9068](https://cve.now/CVE-2015-9068.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a mink syscall is not properly validated. (no CVSS, All Qualcomm products)
- [CVE-2015-9069](https://cve.now/CVE-2015-9069.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, the Secure File System can become corrupted. (no CVSS, All Qualcomm products)
- [CVE-2015-9070](https://cve.now/CVE-2015-9070.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone sysca (no CVSS, All Qualcomm products)
- [CVE-2015-9071](https://cve.now/CVE-2015-9071.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a buffer over-read vulnerability exists in a TrustZone sysca (no CVSS, All Qualcomm products)
- [CVE-2015-9072](https://cve.now/CVE-2015-9072.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone sy (no CVSS, All Qualcomm products)
- [CVE-2015-9073](https://cve.now/CVE-2015-9073.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occur in a TrustZone sy (no CVSS, All Qualcomm products)
- [CVE-2016-10343](https://cve.now/CVE-2016-10343.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, sSL handshake failure with ClientHello rejection results in (no CVSS, All Qualcomm products)
- [CVE-2016-10344](https://cve.now/CVE-2016-10344.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, the use of an out-of-range pointer offset is potentially pos (no CVSS, All Qualcomm products)
- [CVE-2016-10346](https://cve.now/CVE-2016-10346.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in the hypervisor. (no CVSS, All Qualcomm products)
- [CVE-2016-10347](https://cve.now/CVE-2016-10347.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an argument to a hypervisor function is not properly validat (no CVSS, All Qualcomm products)
- [CVE-2016-10380](https://cve.now/CVE-2016-10380.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2016-10381](https://cve.now/CVE-2016-10381.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, the UE can send unprotected MeasurementReports revealing UE (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2016-10382](https://cve.now/CVE-2016-10382.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, access control to the I2C bus is not sufficient. (no CVSS, All Qualcomm products)
- [CVE-2016-10383](https://cve.now/CVE-2016-10383.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, there is a TOCTOU race condition in Secure UI. (no CVSS, All Qualcomm products)
- [CVE-2016-10384](https://cve.now/CVE-2016-10384.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a WLAN driver ioct (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2016-10385](https://cve.now/CVE-2016-10385.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a use-after-free vulnerability exists in IMS RCS. (no CVSS, Qualcomm Snapdragon Mobile)
- [CVE-2016-10386](https://cve.now/CVE-2016-10386.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an array index out of bounds vulnerability exists in LPP. (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2016-10387](https://cve.now/CVE-2016-10387.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an assertion was potentially reachable in a handover scenari (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2016-10388](https://cve.now/CVE-2016-10388.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a configuration vulnerability exists when loading a 3rd-part (no CVSS, All Qualcomm products)
- [CVE-2016-10389](https://cve.now/CVE-2016-10389.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, there is no size check for the images being flashed onto the (no CVSS, All Qualcomm products)
- [CVE-2016-10390](https://cve.now/CVE-2016-10390.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, when downloading a file, an excessive amount of memory may b (no CVSS)
- [CVE-2016-10391](https://cve.now/CVE-2016-10391.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, the length in an HCI command is not properly checked for val (no CVSS, All Qualcomm products)
- [CVE-2016-10392](https://cve.now/CVE-2016-10392.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a driver can potentially leak kernel memory. (no CVSS, Qualcomm Snapdragon Mobile, Snapdragon Wear)
- [CVE-2016-5871](https://cve.now/CVE-2016-5871.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow to buffer overflow vulnerability exists (no CVSS, All Qualcomm products)
- [CVE-2016-5872](https://cve.now/CVE-2016-5872.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, arguments to several QTEE syscalls are not properly validate (no CVSS, All Qualcomm products)
- [CVE-2017-12881](https://cve.now/CVE-2017-12881.md): Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication (no CVSS, org.springframework.batch:spring-batch-admin-manager)
- [CVE-2017-12882](https://cve.now/CVE-2017-12882.md): Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary Jav (no CVSS, org.springframework.batch:spring-batch-admin-manager)
- [CVE-2017-12946](https://cve.now/CVE-2017-12946.md): classes\\controller\\admin\\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete action with the id, id (no CVSS)
- [CVE-2017-12947](https://cve.now/CVE-2017-12947.md): classes\\controller\\admin\\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash action with the id, (no CVSS)
- [CVE-2017-12948](https://cve.now/CVE-2017-12948.md): Core\\Admin\\PFTemplater.php in the PressForward plugin 4.3.0 and earlier for WordPress has XSS in the PATH\_INFO to wp-admin/admin.php, relate (no CVSS)
- [CVE-2017-12949](https://cve.now/CVE-2017-12949.md): lib\\modules\\contributors\\contributor\_list\_table.php in the Podlove Podcast Publisher plugin 2.5.3 and earlier for WordPress has SQL injectio (no CVSS)
- [CVE-2017-8253](https://cve.now/CVE-2017-8253.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, kernel memory can potentially be overwritten if an invalid m (no CVSS, All Qualcomm products)
- [CVE-2017-8254](https://cve.now/CVE-2017-8254.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an audio client pointer is dereferenced before being checked (no CVSS, All Qualcomm products)
- [CVE-2017-8255](https://cve.now/CVE-2017-8255.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an integer overflow vulnerability exists in boot. (no CVSS, All Qualcomm products)
- [CVE-2017-8256](https://cve.now/CVE-2017-8256.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, array out of bounds access can occur if userspace sends more (no CVSS, All Qualcomm products)
- [CVE-2017-8257](https://cve.now/CVE-2017-8257.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, when accessing the sde\_rotator debug interface for register (no CVSS, All Qualcomm products)
- [CVE-2017-8260](https://cve.now/CVE-2017-8260.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, due to a type downcast, a value may improperly pass validati (no CVSS, All Qualcomm products)
- [CVE-2017-8261](https://cve.now/CVE-2017-8261.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in a camera driver ioctl, a kernel overwrite can potentially (no CVSS, All Qualcomm products)
- [CVE-2017-8262](https://cve.now/CVE-2017-8262.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in some memory allocation and free functions, a race conditi (no CVSS, All Qualcomm products)
- [CVE-2017-8263](https://cve.now/CVE-2017-8263.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a kernel fault can occur when doing certain operations on a (no CVSS, All Qualcomm products)
- [CVE-2017-8265](https://cve.now/CVE-2017-8265.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver which can lead to (no CVSS, All Qualcomm products)
- [CVE-2017-8266](https://cve.now/CVE-2017-8266.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a video driver potentially leadin (no CVSS, All Qualcomm products)
- [CVE-2017-8267](https://cve.now/CVE-2017-8267.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in an IOCTL handler potentially lead (no CVSS, All Qualcomm products)
- [CVE-2017-8268](https://cve.now/CVE-2017-8268.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, the camera application can possibly request frame/command bu (no CVSS, All Qualcomm products)
- [CVE-2017-8270](https://cve.now/CVE-2017-8270.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition exists in a driver potentially leading to a (no CVSS, All Qualcomm products)
- [CVE-2017-8272](https://cve.now/CVE-2017-8272.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in a driver function, a value from userspace is not properly (no CVSS, All Qualcomm products)
- [CVE-2015-7944](https://cve.now/CVE-2015-7944.md): The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2. (no CVSS)
- [CVE-2015-7945](https://cve.now/CVE-2015-7945.md): The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2. (no CVSS)
- [CVE-2017-0687](https://cve.now/CVE-2017-0687.md): A denial of service vulnerability in the Android media framework (libavc). (no CVSS)
- [CVE-2017-11185](https://cve.now/CVE-2017-11185.md): The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) v (CVSS 7.5)
- [CVE-2017-11652](https://cve.now/CVE-2017-11652.md): Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the CrashReporter directory, which allows local users to gain privileges vi (no CVSS)
- [CVE-2017-11653](https://cve.now/CVE-2017-11653.md): Razer Synapse 2.20.15.1104 and earlier uses weak permissions for the Devices directory, which allows local users to gain privileges via a Tr (no CVSS)
- [CVE-2017-12420](https://cve.now/CVE-2017-12420.md): Heap-based buffer overflow in the SMB implementation in NetApp Clustered Data ONTAP before 8.3.2P8 and 9.0 before P2 allows remote authentic (no CVSS)
- [CVE-2017-12589](https://cve.now/CVE-2017-12589.md): ToMAX R60G R60GV2-V2.0-v.2.6.3-170330 devices do not have any protection against a CSRF attack. (no CVSS)
- [CVE-2017-12591](https://cve.now/CVE-2017-12591.md): ASUS DSL-N10S V2.1.16\_APAC devices have reflected and stored cross site scripting, as demonstrated by the snmpSysName parameter. (no CVSS)
- [CVE-2017-12592](https://cve.now/CVE-2017-12592.md): ASUS DSL-N10S V2.1.16\_APAC devices have a privilege escalation vulnerability. (no CVSS)
- [CVE-2017-12593](https://cve.now/CVE-2017-12593.md): ASUS DSL-N10S V2.1.16\_APAC devices allow CSRF. (no CVSS)
- [CVE-2017-12776](https://cve.now/CVE-2017-12776.md): SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport param (no CVSS)
- [CVE-2015-1817](https://cve.now/CVE-2015-1817.md): Stack-based buffer overflow in the inet\_pton function in network/inet\_pton.c in musl libc 0.9.15 through 1.0.4, and 1.1.0 through 1.1.7 allo (no CVSS)
- [CVE-2015-1878](https://cve.now/CVE-2015-1878.md): Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign ar (no CVSS)
- [CVE-2015-3649](https://cve.now/CVE-2015-3649.md): The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp containing "openuri-" follo (no CVSS, open-uri-cached)
- [CVE-2015-4082](https://cve.now/CVE-2015-4082.md): attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write privileges for the e (no CVSS, attic)
- [CVE-2017-12582](https://cve.now/CVE-2017-12582.md): Unprivileged user can access all functions in the Surveillance Station component in QNAP TS212P devices with firmware 4.2.1 build 20160601. (no CVSS)
- [CVE-2017-12680](https://cve.now/CVE-2017-12680.md): Cross-Site Scripting (XSS) exists in NexusPHP 1.5 via the type parameter to shoutbox.php. (no CVSS)
- [CVE-2017-12859](https://cve.now/CVE-2017-12859.md): NetApp Data ONTAP before 8.2.5, when operating in 7-Mode in NFS environments, allows remote attackers to cause a denial of service via unspe (no CVSS)
- [CVE-2017-9767](https://cve.now/CVE-2017-9767.md): Multiple cross-site scripting (XSS) vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web sc (no CVSS)
- [CVE-2017-9816](https://cve.now/CVE-2017-9816.md): Cross-site scripting (XSS) vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2017-12943](https://cve.now/CVE-2017-12943.md): D-Link DIR-600 Rev Bx devices with v2.x firmware allow remote attackers to read passwords via a model/\_\_show\_info.php?REQUIRE\_FILE= absolute (no CVSS)
- [CVE-2017-12944](https://cve.now/CVE-2017-12944.md): The TIFFReadDirEntryArray function in tif\_read.c in LibTIFF 4.0.8 mishandles memory allocation for short files, which allows remote attacker (no CVSS)
- [CVE-2017-1338](https://cve.now/CVE-2017-1338.md): IBM DOORS Next Generation (DNG/RRC) 4.0, 5.0, and 6.0 is vulnerable to cross-site scripting. (no CVSS, IBM Rational DOORS Next Generation)
- [CVE-2017-1501](https://cve.now/CVE-2017-1501.md): IBM WebSphere Application Server 8.0, 8.5, and 9.0 could provide weaker than expected security after using the Admin Console to update the w (no CVSS, IBM WebSphere Application Server)
- [CVE-2017-10665](https://cve.now/CVE-2017-10665.md): Directory traversal vulnerability in ajaxfileupload.php in Kayson Group Ltd. (no CVSS)
- [CVE-2017-12440](https://cve.now/CVE-2017-12440.md): Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verif (no CVSS, aodh)
- [CVE-2017-12940](https://cve.now/CVE-2017-12940.md): libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function. (no CVSS)
- [CVE-2017-12941](https://cve.now/CVE-2017-12941.md): libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function. (no CVSS)
- [CVE-2017-12942](https://cve.now/CVE-2017-12942.md): libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function. (no CVSS)
- [CVE-2017-7278](https://cve.now/CVE-2017-7278.md): Unspecified vulnerability in ASSA ABLOY APTUS Styra Porttelefonkort 4400 before A2 has unknown impact and attack vectors. (no CVSS)
- [CVE-2017-9454](https://cve.now/CVE-2017-9454.md): Buffer overflow in the ares\_parse\_a\_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to caus (no CVSS)
- [CVE-2017-10811](https://cve.now/CVE-2017-10811.md): Buffalo WCR-1166DS devices with firmware 1.30 and earlier allow an attacker to execute arbitrary OS commands via unspecified vectors. (no CVSS, BUFFALO WCR-1166DS)
- [CVE-2017-10821](https://cve.now/CVE-2017-10821.md): Untrusted search path vulnerability in Installer for Shin Kikan Toukei Houkoku Data Nyuryokuyou Program (program released on 2013 September (no CVSS, Agency for Natural Resources and Energy of Ministry of Econ…)
- [CVE-2017-10822](https://cve.now/CVE-2017-10822.md): Untrusted search path vulnerability in Installer for Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program (program released on 2013 Septem (no CVSS, Agency for Natural Resources and Energy of Ministry of Econ…)
- [CVE-2017-10823](https://cve.now/CVE-2017-10823.md): Untrusted search path vulnerability in Installer for Shin Kinkyuji Houkoku Data Nyuryoku Program (program released on 2011 March 10) Distrib (no CVSS, Agency for Natural Resources and Energy of Ministry of Econ…)
- [CVE-2017-10824](https://cve.now/CVE-2017-10824.md): Untrusted search path vulnerability in TDB CA TypeA use software Version 5.2 and earlier, distributed until 10 August 2017 allows an attacke (no CVSS, Teikoku Databank TDB CA TypeA use software)
- [CVE-2017-12938](https://cve.now/CVE-2017-12938.md): UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . (no CVSS)
- [CVE-2017-12939](https://cve.now/CVE-2017-12939.md): A Remote Code Execution vulnerability was identified in all Windows versions of Unity Editor, e.g., before 5.3.8p2, 5.4.x before 5.4.5p5, 5. (no CVSS)
- [CVE-2017-2228](https://cve.now/CVE-2017-2228.md): Untrusted search path vulnerability in Teikihoukokusho Sakuseishien Tool v4.0 allows an attacker to gain privileges via a Trojan horse DLL i (no CVSS, Agency for Natural Resources and Energy of Ministry of Econ…)
- [CVE-2017-2289](https://cve.now/CVE-2017-2289.md): Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacker to gain privi (no CVSS, KDDI Installer of Qua station connection tool for Windows)
- [CVE-2017-12935](https://cve.now/CVE-2017-12935.md): The ReadMNGImage function in coders/png.c in GraphicsMagick 1.3.26 mishandles large MNG images, leading to an invalid memory read in the Set (no CVSS)
- [CVE-2017-12936](https://cve.now/CVE-2017-12936.md): The ReadWMFImage function in coders/wmf.c in GraphicsMagick 1.3.26 has a use-after-free issue for data associated with exception reporting. (no CVSS)
- [CVE-2017-12937](https://cve.now/CVE-2017-12937.md): The ReadSUNImage function in coders/sun.c in GraphicsMagick 1.3.26 has a colormap heap-based buffer over-read. (no CVSS)
- [CVE-2017-12932](https://cve.now/CVE-2017-12932.md): ext/standard/var\_unserializer.re in PHP 7.0.x through 7.0.22 and 7.1.x through 7.1.8 is prone to a heap use after free while unserializing u (no CVSS)
- [CVE-2017-12933](https://cve.now/CVE-2017-12933.md): The finish\_nested\_data function in ext/standard/var\_unserializer.re in PHP before 5.6.31, 7.0.x before 7.0.21, and 7.1.x before 7.1.7 is pro (no CVSS)
- [CVE-2017-12934](https://cve.now/CVE-2017-12934.md): ext/standard/var\_unserializer.re in PHP 7.0.x before 7.0.21 and 7.1.x before 7.1.7 is prone to a heap use after free while unserializing unt (no CVSS)
- [CVE-2017-12927](https://cve.now/CVE-2017-12927.md): A cross-site scripting vulnerability exists in Cacti 1.1.17 in the method parameter in spikekill.php. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-08-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.