# CVEs published 2017-09-01 30 CVEs were published on September 1, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2016-1895](https://cve.now/CVE-2016-1895.md): NetApp Data ONTAP before 8.2.5 and 8.3.x before 8.3.2P12 allow remote authenticated users to cause a denial of service via vectors related t (no CVSS) - [CVE-2017-12421](https://cve.now/CVE-2017-12421.md): NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to execute arbitrary code on the storage controller via (no CVSS) - [CVE-2017-12423](https://cve.now/CVE-2017-12423.md): NetApp Clustered Data ONTAP 8.3.x before 8.3.2P12 allows remote authenticated users to read data on other Storage Virtual Machines (SVMs) vi (no CVSS) - [CVE-2017-12691](https://cve.now/CVE-2017-12691.md): The ReadOneLayer function in coders/xcf.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) v (no CVSS) - [CVE-2017-12692](https://cve.now/CVE-2017-12692.md): The ReadVIFFImage function in coders/viff.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) (no CVSS) - [CVE-2017-12693](https://cve.now/CVE-2017-12693.md): The ReadBMPImage function in coders/bmp.c in ImageMagick 7.0.6-6 allows remote attackers to cause a denial of service (memory consumption) v (no CVSS) - [CVE-2017-12871](https://cve.now/CVE-2017-12871.md): The aesEncrypt method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.x through 1.14.11 makes it easier for context-dependent attac (no CVSS, simplesamlphp/simplesamlphp) - [CVE-2017-12872](https://cve.now/CVE-2017-12872.md): The (1) Htpasswd authentication source in the authcrypt module and (2) SimpleSAML\_Session class in SimpleSAMLphp 1.14.11 and earlier allow r (no CVSS, simplesamlphp/simplesamlphp) - [CVE-2017-12873](https://cve.now/CVE-2017-12873.md): SimpleSAMLphp 1.7.0 through 1.14.10 might allow attackers to obtain sensitive information, gain unauthorized access, or have unspecified oth (no CVSS, simplesamlphp/simplesamlphp) - [CVE-2017-12874](https://cve.now/CVE-2017-12874.md): The InfoCard module 1.0 for SimpleSAMLphp allows attackers to spoof XML messages by leveraging an incorrect check of return values in signat (no CVSS, simplesamlphp/simplesamlphp-module-infocard) - [CVE-2017-14053](https://cve.now/CVE-2017-14053.md): NetApp OnCommand Unified Manager for Clustered Data ONTAP before 7.2P1 does not set the secure flag for an unspecified cookie in an HTTPS se (no CVSS) - [CVE-2017-14105](https://cve.now/CVE-2017-14105.md): HiveManager Classic through 8.1r1 allows arbitrary JSP code execution by modifying a backup archive before a restore, because the restore fe (no CVSS) - [CVE-2017-14107](https://cve.now/CVE-2017-14107.md): The \_zip\_read\_eocd64 function in zip\_open.c in libzip before 1.3.0 mishandles EOCD records, which allows remote attackers to cause a denial (no CVSS) - [CVE-2017-14106](https://cve.now/CVE-2017-14106.md): The tcp\_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of service (\_\_tcp\_select\_ (no CVSS) - [CVE-2017-10829](https://cve.now/CVE-2017-10829.md): Untrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions distributed through the website till 2017 Augu (no CVSS, NIPPON TELEGRAPH AND TELEPHONE EAST Remote Support Tool · N…) - [CVE-2017-10848](https://cve.now/CVE-2017-10848.md): Untrusted search path vulnerability in Installers for DocuWorks 8.0.7 and earlier and DocuWorks Viewer Light published in Jul 2017 and earli (no CVSS, Fuji Xerox Co. Installer for DocuWorks) - [CVE-2017-10849](https://cve.now/CVE-2017-10849.md): Untrusted search path vulnerability in Self-extracting document generated by DocuWorks 8.0.7 and earlier allows an attacker to gain privileg (no CVSS, Fuji Xerox Co. Self-extracting document generated by DocuWo…) - [CVE-2017-10850](https://cve.now/CVE-2017-10850.md): Untrusted search path vulnerability in Installers of ART EX Driver for ApeosPort-VI C7771/C6671/C5571/C4471/C3371/C2271, DocuCentre-VI C7771 (no CVSS, Fuji Xerox Co. Installer of ART EX Driver for ApeosPort-… +8) - [CVE-2017-10851](https://cve.now/CVE-2017-10851.md): Untrusted search path vulnerability in Installer for ContentsBridge Utility for Windows 7.4.0 and earlier allows an attacker to gain privile (no CVSS, Fuji Xerox Co. Installer for ContentsBridge Utility for Win…) - [CVE-2015-7746](https://cve.now/CVE-2015-7746.md): NetApp Data ONTAP before 8.2.4, when operating in 7-Mode, allows remote attackers to bypass authentication and (1) obtain sensitive informat (no CVSS) - [CVE-2017-12868](https://cve.now/CVE-2017-12868.md): The secureCompare method in lib/SimpleSAML/Utils/Crypto.php in SimpleSAMLphp 1.14.13 and earlier, when used with PHP before 5.6, allows atta (no CVSS, simplesamlphp/simplesamlphp) - [CVE-2017-12869](https://cve.now/CVE-2017-12869.md): The multiauth module in SimpleSAMLphp 1.14.13 and earlier allows remote attackers to bypass authentication context restrictions and use an a (no CVSS, simplesamlphp/simplesamlphp) - [CVE-2017-12870](https://cve.now/CVE-2017-12870.md): SimpleSAMLphp 1.14.12 and earlier make it easier for man-in-the-middle attackers to obtain sensitive information by leveraging use of the ae (no CVSS, simplesamlphp/simplesamlphp) - [CVE-2017-13672](https://cve.now/CVE-2017-13672.md): QEMU (aka Quick Emulator), when built with the VGA display emulator support, allows local guest OS privileged users to cause a denial of ser (no CVSS) - [CVE-2017-13674](https://cve.now/CVE-2017-13674.md): Symantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability. (no CVSS, Symantec ProxyClient) - [CVE-2017-13711](https://cve.now/CVE-2017-13711.md): Use-after-free vulnerability in the sofree function in slirp/socket.c in QEMU (aka Quick Emulator) allows attackers to cause a denial of ser (no CVSS) - [CVE-2017-14103](https://cve.now/CVE-2017-14103.md): The ReadJNGImage and ReadOneJNGImage functions in coders/png.c in GraphicsMagick 1.3.26 do not properly manage image pointers after certain (no CVSS) - [CVE-2017-3897](https://cve.now/CVE-2017-3897.md): A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee (no CVSS, McAfee Live Safe · McAfee Security Scan Plus) - [CVE-2017-3898](https://cve.now/CVE-2017-3898.md): A man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in McAfee LiveSafe (MLS) versions prior to 16 (no CVSS, McAfee Live Safe) - [CVE-2017-14102](https://cve.now/CVE-2017-14102.md): MIMEDefang 2.80 and earlier creates a PID file after dropping privileges to a non-root account, which might allow local users to kill arbitr (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-09-01 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.