CVEs published September 1, 2017
30 CVEs were published on September 1, 2017: 0 critical, 0 high.
- Published
- 30
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 30
- Now in CISA KEV
- 0
- Fix available
- 7
Most affected products
- simplesamlphp/simplesamlphp
- 6
- Fuji Xerox Co. Installer for ContentsBridge Utility for Win…
- 1
- Fuji Xerox Co. Installer for DocuWorks
- 1
- Fuji Xerox Co. Installer of ART EX Driver for ApeosPort-… +8
- 1
- Fuji Xerox Co. Self-extracting document generated by DocuWo…
- 1
- McAfee Live Safe
- 1
- McAfee Live Safe · McAfee Security Scan Plus
- 1
- NIPPON TELEGRAPH AND TELEPHONE EAST Remote Support Tool · N…
- 1
- simplesamlphp/simplesamlphp-module-infocard
- 1
- Symantec ProxyClient
- 1
Medium, low and unrated 30
- CVE-2016-1895NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related t
- CVE-2017-12421NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the storage controller via
- CVE-2017-12423NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines (SVMs) vi
- CVE-2017-12691The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) v
- CVE-2017-12692The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption)
- CVE-2017-12693The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) v
- CVE-2017-12871The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.x through 1.14.11 makes it easier for context-dependent attacsimplesamlphp/simplesamlphp
- CVE-2017-12872The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML_Session class in SimpleSAMLphp 1.14.11 and earlier allow rsimplesamlphp/simplesamlphp
- CVE-2017-12873SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified othsimplesamlphp/simplesamlphp
- CVE-2017-12874The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signatsimplesamlphp/simplesamlphp-module-infocard
- CVE-2017-14053NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS se
- CVE-2017-14105HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore fe
- CVE-2017-14107The _zip_read_eocd64 function in zip_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial
- CVE-2017-14106The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service (__tcp_select_
- CVE-2017-10829Untrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions distributed through the website till 2017 AuguNIPPON TELEGRAPH AND TELEPHONE EAST Remote Support Tool · N…
- CVE-2017-10848Untrusted search path vulnerability in Installers for DocuWorks 8.0.7 and earlier and DocuWorks Viewer Light published in Jul 2017 and earliFuji Xerox Co. Installer for DocuWorks
- CVE-2017-10849Untrusted search path vulnerability in Self-extracting document generated by DocuWorks 8.0.7 and earlier allows an attacker to gain privilegFuji Xerox Co. Self-extracting document generated by DocuWo…
- CVE-2017-10850Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771Fuji Xerox Co. Installer of ART EX Driver for ApeosPort-… +8
- CVE-2017-10851Untrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and earlier allows an attacker to gain privileFuji Xerox Co. Installer for ContentsBridge Utility for Win…
- CVE-2015-7746NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and (1) obtain sensitive informat
- CVE-2017-12868The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows attasimplesamlphp/simplesamlphp
- CVE-2017-12869The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an asimplesamlphp/simplesamlphp
- CVE-2017-12870SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the aesimplesamlphp/simplesamlphp
- CVE-2017-13672QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of ser
- CVE-2017-13674Symantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability.Symantec ProxyClient
- CVE-2017-13711Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of ser
- CVE-2017-14103The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain
- CVE-2017-3897A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfeeMcAfee Live Safe · McAfee Security Scan Plus
- CVE-2017-3898A man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in McAfee LiveSafe (MLS) versions prior to 16McAfee Live Safe
- CVE-2017-14102MIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitr