CVEs published September 9, 2017
14 CVEs were published on September 9, 2017: 0 critical, 0 high.
- Published
- 14
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 14
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- AzeoTech DAQFactory
- 2
- OPW Fuel Management Systems SiteSentinel Integra and SiteSe…
- 2
- PCF Single Sign-On for PCF:1.3.x versions prior to 1.3.4, 1…
- 2
Medium, low and unrated 14
- CVE-2017-14225The av_color_primaries_name function in libavutil/pixdesc.c in FFmpeg 3.3.3 may return a NULL pointer depending on a value contained in a fi
- CVE-2017-14226WP1StylesListener.cpp, WP5StylesListener.cpp, and WP42StylesListener.cpp in libwpd 0.10.1 mishandle iterators, which allows remote attackers
- CVE-2017-14227In MongoDB libbson 1.7.0, the bson_iter_codewscope function in bson-iter.c miscalculates a bson_utf8_validate length argument, which allows
- CVE-2017-14228In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function paste_tokens() in preproc.c, aka a NULL pointer dere
- CVE-2017-14229There is an infinite loop in the jpc_dec_tileinit function in jpc/jpc_dec.c of Jasper 2.0.13.
- CVE-2017-12699An Incorrect Default Permissions issue was discovered in AzeoTech DAQFactory versions prior to 17.1.AzeoTech DAQFactory
- CVE-2017-12731A SQL Injection issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel Integra 500, and SiteSentinel iSiOPW Fuel Management Systems SiteSentinel Integra and SiteSe…
- CVE-2017-12733A Missing Authentication for Critical Function issue was discovered in OPW Fuel Management Systems SiteSentinel Integra 100, SiteSentinel InOPW Fuel Management Systems SiteSentinel Integra and SiteSe…
- CVE-2017-14222In libavformat/mov.c in FFmpeg 3.3.3, a DoS in read_tfra() due to lack of an EOF (End of File) check might cause huge CPU and memory consump
- CVE-2017-14223In libavformat/asfdec_f.c in FFmpeg 3.3.3, a DoS in asf_build_simple_index() due to lack of an EOF (End of File) check might cause huge CPU
- CVE-2017-14224A heap-based buffer overflow in WritePCXImage in coders/pcx.c in ImageMagick 7.0.6-8 Q16 allows remote attackers to cause a denial of servic
- CVE-2017-5147An Uncontrolled Search Path Element issue was discovered in AzeoTech DAQFactory versions prior to 17.1.AzeoTech DAQFactory
- CVE-2017-8040In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, an XXE (XML External EntiPCF Single Sign-On for PCF:1.3.x versions prior to 1.3.4, 1…
- CVE-2017-8041In Single Sign-On for Pivotal Cloud Foundry (PCF) 1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3, a user can execute a XSS PCF Single Sign-On for PCF:1.3.x versions prior to 1.3.4, 1…