# CVEs published 2017-08-25

36 CVEs were published on August 25, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-12816](https://cve.now/CVE-2017-12816.md): In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used b (no CVSS, Kaspersky Lab Kaspersky Internet Security for Android)
- [CVE-2017-12817](https://cve.now/CVE-2017-12817.md): In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted. (no CVSS, Kaspersky Lab Kaspersky Internet Security for Android)
- [CVE-2017-12694](https://cve.now/CVE-2017-12694.md): A Directory Traversal issue was discovered in SpiderControl SCADA Web Server. (no CVSS, SpiderControl SCADA Web Server)
- [CVE-2017-12707](https://cve.now/CVE-2017-12707.md): A Stack-based Buffer Overflow issue was discovered in SpiderControl SCADA MicroBrowser Versions 1.6.30.144 and prior. (no CVSS, SpiderControl SCADA MicroBrowser)
- [CVE-2017-12857](https://cve.now/CVE-2017-12857.md): Polycom SoundStation IP, VVX, and RealPresence Trio that are running software older than UCS 4.0.12, 5.4.5 rev AG, 5.4.7, 5.5.2, or 5.6.0 ar (no CVSS)
- [CVE-2017-7926](https://cve.now/CVE-2017-7926.md): A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). (no CVSS, OSIsoft PI Web API)
- [CVE-2017-7930](https://cve.now/CVE-2017-7930.md): An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. (no CVSS, OSIsoft PI Server)
- [CVE-2017-7934](https://cve.now/CVE-2017-7934.md): An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. (no CVSS, OSIsoft PI Server)
- [CVE-2017-9640](https://cve.now/CVE-2017-9640.md): A Path Traversal issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web prior to 6.5; ALC WebCTRL, SiteSc (no CVSS, Automated Logic Corporation WebCTRL, i-VU, SiteScan)
- [CVE-2017-9644](https://cve.now/CVE-2017-9644.md): An Unquoted Search Path or Element issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; (no CVSS, Automated Logic Corporation WebCTRL, i-VU, SiteScan)
- [CVE-2017-9650](https://cve.now/CVE-2017-9650.md): An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web (no CVSS, Automated Logic Corporation WebCTRL, i-VU, SiteScan)
- [CVE-2014-7857](https://cve.now/CVE-2014-7857.md): D-Link DNS-320L firmware before 1.04b12, DNS-327L before 1.03b04 Build0119, DNR-326 1.40b03, DNS-320B 1.02b01, DNS-345 1.03b06, DNS-325 1.05 (no CVSS)
- [CVE-2014-7858](https://cve.now/CVE-2014-7858.md): The check\_login function in D-Link DNR-326 before 2.10 build 03 allows remote attackers to bypass authentication and log in by setting the u (no CVSS)
- [CVE-2014-7859](https://cve.now/CVE-2014-7859.md): Stack-based buffer overflow in login\_mgr.cgi in D-Link firmware DNR-320L and DNS-320LW before 1.04b08, DNR-322L before 2.10 build 03, DNR-32 (no CVSS)
- [CVE-2014-7860](https://cve.now/CVE-2014-7860.md): The web/web\_file/fb\_publish.php script in D-Link DNS-320L before 1.04b12 and DNS-327L before 1.03b04 Build0119 does not authenticate request (no CVSS)
- [CVE-2014-9564](https://cve.now/CVE-2014-9564.md): CRLF injection vulnerability in IBM Flex System EN6131 40Gb Ethernet and IB6131 40Gb Infiniband Switch firmware before 3.4.1110 allows remot (no CVSS)
- [CVE-2014-9637](https://cve.now/CVE-2014-9637.md): GNU patch 2.7.2 and earlier allows remote attackers to cause a denial of service (memory consumption and segmentation fault) via a crafted d (no CVSS)
- [CVE-2015-1324](https://cve.now/CVE-2015-1324.md): Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 (no CVSS)
- [CVE-2015-1325](https://cve.now/CVE-2015-1325.md): Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2 (no CVSS)
- [CVE-2015-1395](https://cve.now/CVE-2015-1395.md): Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to ar (no CVSS)
- [CVE-2015-3206](https://cve.now/CVE-2015-3206.md): The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers t (no CVSS, pykerberos · kerberos)
- [CVE-2015-3211](https://cve.now/CVE-2015-3211.md): php-fpm allows local users to write to or create arbitrary files via a symlink attack. (no CVSS)
- [CVE-2015-3257](https://cve.now/CVE-2015-3257.md): Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perfor (no CVSS, zendframework/zend-diactoros)
- [CVE-2015-4017](https://cve.now/CVE-2015-4017.md): Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules. (no CVSS, salt)
- [CVE-2015-4180](https://cve.now/CVE-2015-4180.md): Directory traversal vulnerability in get\_file.php in phpMyBackupPro 2.1 through 2.4 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2015-4181](https://cve.now/CVE-2015-4181.md): Directory traversal vulnerability in get\_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2015-5700](https://cve.now/CVE-2015-5700.md): mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. (no CVSS)
- [CVE-2015-5701](https://cve.now/CVE-2015-5701.md): mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files via a symlink attac (no CVSS)
- [CVE-2017-13697](https://cve.now/CVE-2017-13697.md): controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable. (no CVSS)
- [CVE-2016-5816](https://cve.now/CVE-2016-5816.md): A Use of Hard-Coded Cryptographic Key issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 version (no CVSS)
- [CVE-2017-12703](https://cve.now/CVE-2017-12703.md): A Cross-Site Request Forgery (CSRF) issue was discovered in Westermo MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 (no CVSS, Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455)
- [CVE-2017-12709](https://cve.now/CVE-2017-12709.md): A Use of Hard-Coded Credentials issue was discovered in MRD-305-DIN versions older than 1.7.5.0, and MRD-315, MRD-355, MRD-455 versions olde (no CVSS, Westermo MRD-305-DIN, MRD-315, MRD-355, and MRD-455)
- [CVE-2017-13692](https://cve.now/CVE-2017-13692.md): In Tidy 5.5.31, the IsURLCodePoint function in attrs.c allows attackers to cause a denial of service (Segmentation Fault), as demonstrated b (no CVSS)
- [CVE-2017-13693](https://cve.now/CVE-2017-13693.md): The acpi\_ds\_create\_operands() function in drivers/acpi/acpica/dsutils.c in the Linux kernel through 4.12.9 does not flush the operand cache (no CVSS)
- [CVE-2017-13694](https://cve.now/CVE-2017-13694.md): The acpi\_ps\_complete\_final\_op() function in drivers/acpi/acpica/psobject.c in the Linux kernel through 4.12.9 does not flush the node and no (no CVSS)
- [CVE-2017-13695](https://cve.now/CVE-2017-13695.md): The acpi\_ns\_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the operand cache and caus (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-08-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.