# CVEs published 2017-09-04

12 CVEs were published on September 4, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-14135](https://cve.now/CVE-2017-14135.md): enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to execut (no CVSS)
- [CVE-2017-14136](https://cve.now/CVE-2017-14136.md): OpenCV (Open Source Computer Vision Library) 3.3 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an (no CVSS, opencv-python · opencv-contrib-python)
- [CVE-2017-14137](https://cve.now/CVE-2017-14137.md): ReadWEBPImage in coders/webp.c in ImageMagick 7.0.6-5 has an issue where memory allocation is excessive because it depends only on a length (no CVSS)
- [CVE-2017-14138](https://cve.now/CVE-2017-14138.md): ImageMagick 7.0.6-5 has a memory leak vulnerability in ReadWEBPImage in coders/webp.c because memory is not freed in certain error cases, as (no CVSS)
- [CVE-2017-14139](https://cve.now/CVE-2017-14139.md): ImageMagick 7.0.6-2 has a memory leak vulnerability in WriteMSLImage in coders/msl.c. (no CVSS)
- [CVE-2017-14123](https://cve.now/CVE-2017-14123.md): Zoho ManageEngine Firewall Analyzer 12200 has an unrestricted File Upload vulnerability in the "Group Chat" section. (no CVSS)
- [CVE-2017-14126](https://cve.now/CVE-2017-14126.md): The Participants Database plugin before 1.7.5.10 for WordPress has XSS. (no CVSS)
- [CVE-2017-14127](https://cve.now/CVE-2017-14127.md): Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI\_Fw\_v7 devices allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2017-14128](https://cve.now/CVE-2017-14128.md): The decode\_line\_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, all (no CVSS)
- [CVE-2017-14129](https://cve.now/CVE-2017-14129.md): The read\_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows (no CVSS)
- [CVE-2017-14130](https://cve.now/CVE-2017-14130.md): The \_bfd\_elf\_parse\_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binuti (no CVSS)
- [CVE-2017-14132](https://cve.now/CVE-2017-14132.md): JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18, 1.900.19, 1.900.20, 1.900 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-09-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.