# CVEs published 2017-08-23 33 CVEs were published on August 23, 2017: 3 critical, 0 high. 2 are now in CISA KEV. Days are UTC. - [CVE-2017-12847](https://cve.now/CVE-2017-12847.md): Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to ki (no CVSS) - [CVE-2017-13648](https://cve.now/CVE-2017-13648.md): In GraphicsMagick 1.3.26, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c. (no CVSS) - [CVE-2017-13649](https://cve.now/CVE-2017-13649.md): UnrealIRCd 4.0.13 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbi (no CVSS) - [CVE-2017-9506](https://cve.now/CVE-2017-9506.md): The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows (no CVSS, Atlassian OAuth Plugin) - [CVE-2017-11317](https://cve.now/CVE-2017-11317.md): Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which a (CVSS 9.8, KEV) - [CVE-2017-11357](https://cve.now/CVE-2017-11357.md): Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to RadAsyncUpload, which allows remote attacke (CVSS 9.8, KEV) - [CVE-2017-13147](https://cve.now/CVE-2017-13147.md): In GraphicsMagick 1.3.26, an allocation failure vulnerability was found in the function ReadMNGImage in coders/png.c when a small MNG file h (no CVSS) - [CVE-2017-12809](https://cve.now/CVE-2017-12809.md): QEMU (aka Quick Emulator), when built with the IDE disk and CD/DVD-ROM Emulator support, allows local guest OS privileged users to cause a d (no CVSS) - [CVE-2017-12965](https://cve.now/CVE-2017-12965.md): Session fixation vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack web sessions via the PHPSESSID parameter. (no CVSS) - [CVE-2017-12970](https://cve.now/CVE-2017-12970.md): Cross-site request forgery (CSRF) vulnerability in Apache2Triad 1.5.4 allows remote attackers to hijack the authentication of authenticated (no CVSS) - [CVE-2017-12971](https://cve.now/CVE-2017-12971.md): Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the accoun (no CVSS) - [CVE-2015-5224](https://cve.now/CVE-2015-5224.md): The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly o (CVSS 9.8) - [CVE-2017-11159](https://cve.now/CVE-2017-11159.md): Multiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader before 1.4.2-084 on Windows allows local atta (no CVSS, Synology Photo Station Uploader) - [CVE-2017-11610](https://cve.now/CVE-2017-11610.md): The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.4, 3.2.x before 3.2.4, and 3.3.x before 3.3.3 allows remote authenticated us (no CVSS, supervisor) - [CVE-2017-12791](https://cve.now/CVE-2017-12791.md): Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.11.7 and 2017.7.x before 2017.7.1 allows remote mini (no CVSS, salt) - [CVE-2017-12844](https://cve.now/CVE-2017-12844.md): Cross-site scripting (XSS) vulnerability in the admin panel in IceWarp Mail Server 10.4.4 allows remote authenticated domain administrators (no CVSS) - [CVE-2017-12858](https://cve.now/CVE-2017-12858.md): Double free vulnerability in the \_zip\_dirent\_read function in zip\_dirent.c in libzip allows attackers to have unspecified impact via unknown (no CVSS) - [CVE-2017-12904](https://cve.now/CVE-2017-12904.md): Improper Neutralization of Special Elements used in an OS Command in bookmarking function of Newsbeuter versions 0.7 through 2.9 allows remo (no CVSS) - [CVE-2017-13137](https://cve.now/CVE-2017-13137.md): The FormCraft Basic plugin 1.0.5 for WordPress has SQL injection in the id parameter to form.php. (no CVSS) - [CVE-2017-13138](https://cve.now/CVE-2017-13138.md): DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary (no CVSS) - [CVE-2017-13139](https://cve.now/CVE-2017-13139.md): In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, the ReadOneMNGImage function in coders/png.c has an out-of-bounds read with the MNG CL (no CVSS) - [CVE-2017-13140](https://cve.now/CVE-2017-13140.md): In ImageMagick before 6.9.9-1 and 7.x before 7.0.6-2, the ReadOnePNGImage function in coders/png.c allows remote attackers to cause a denial (no CVSS) - [CVE-2017-13141](https://cve.now/CVE-2017-13141.md): In ImageMagick before 6.9.9-4 and 7.x before 7.0.6-4, a crafted file could trigger a memory leak in ReadOnePNGImage in coders/png.c. (no CVSS) - [CVE-2017-13142](https://cve.now/CVE-2017-13142.md): In ImageMagick before 6.9.9-0 and 7.x before 7.0.6-1, a crafted PNG file could trigger a crash because there was an insufficient check for s (no CVSS) - [CVE-2017-13143](https://cve.now/CVE-2017-13143.md): In ImageMagick before 6.9.7-6 and 7.x before 7.0.4-6, the ReadMATImage function in coders/mat.c uses uninitialized data, which might allow r (no CVSS) - [CVE-2017-13144](https://cve.now/CVE-2017-13144.md): In ImageMagick before 6.9.7-10, there is a crash (rather than a "width or height exceeds limit" error report) if the image dimensions are to (no CVSS) - [CVE-2017-13145](https://cve.now/CVE-2017-13145.md): In ImageMagick before 6.9.8-8 and 7.x before 7.0.5-9, the ReadJP2Image function in coders/jp2.c does not properly validate the channel geome (no CVSS) - [CVE-2017-13146](https://cve.now/CVE-2017-13146.md): In ImageMagick before 6.9.8-5 and 7.x before 7.0.5-6, there is a memory leak in the ReadMATImage function in coders/mat.c. (no CVSS) - [CVE-2017-13131](https://cve.now/CVE-2017-13131.md): In ImageMagick 7.0.6-8, a memory leak vulnerability was found in the function ReadMIFFImage in coders/miff.c, which allows attackers to caus (no CVSS) - [CVE-2017-13132](https://cve.now/CVE-2017-13132.md): In ImageMagick 7.0.6-8, the WritePDFImage function in coders/pdf.c operates on an incorrect data structure in the "dump uncompressed PseudoC (no CVSS) - [CVE-2017-13133](https://cve.now/CVE-2017-13133.md): In ImageMagick 7.0.6-8, the load\_level function in coders/xcf.c lacks offset validation, which allows attackers to cause a denial of service (no CVSS) - [CVE-2017-13134](https://cve.now/CVE-2017-13134.md): In ImageMagick 7.0.6-6 and GraphicsMagick 1.3.26, a heap-based buffer over-read was found in the function SFWScan in coders/sfw.c, which all (no CVSS) - [CVE-2017-13130](https://cve.now/CVE-2017-13130.md): mcmnm in BMC Patrol allows local users to gain privileges via a crafted libmcmclnx.so file in the current working directory, because it is s (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-08-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.