CVEs published September 15, 2017
26 CVEs were published on September 15, 2017: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 26
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 25
- Now in CISA KEV
- 1
- Fix available
- 3
Most affected products
- Digital Arts "i-filter 6.0 installer"
- 2
- NTT DOCOMO Wi-Fi STATION L-02F
- 2
- VMware ESXi · VMware Workstation +1
- 2
- Apache Software Foundation Apache Struts · org.apache.strut…
- 1
- Corega CG-WLR300NM
- 1
- Digital Arts "i-filter 6.0 install program"
- 1
- FUJITSU LIMITED FENCE-Explorer for Windows
- 1
- HackerOne Ruby
- 1
- Internet Initiative Japan SEIL/X · Internet Initiative J… +2
- 1
- org.apache.wicket:wicket-core
- 1
High 1
Medium, low and unrated 25
- CVE-2014-7808Apache Wicket before 1.5.13, 6.x before 6.19.0, and 7.x before 7.0.0-M5 make it easier for attackers to defeat a cryptographic protection meorg.apache.wicket:wicket-core
- CVE-2014-9463functions_vbseo_hook.php in the VBSEO module for vBulletin allows remote authenticated users to execute arbitrary code via the HTTP Referer
- CVE-2015-0110IBM Business Process Manager (aka BPM) 7.5.x, 8.0.x, and 8.5.x and WebSphere Lombardi Edition (aka WLE) 7.2.x allow remote authenticated use
- CVE-2015-1527Integer overflow in IAudioPolicyService.cpp in Android allows local users to gain privileges via a crafted application, aka Android Bug ID 1
- CVE-2017-9328Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execu
- CVE-2017-0898Ruby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a precious specifier (*) with a huge minus valHackerOne Ruby
- CVE-2017-14497The tpacket_rcv function in net/packet/af_packet.c in the Linux kernel before 4.13 mishandles vnet headers, which might allow local users to
- CVE-2017-14498SilverStripe CMS before 3.6.1 has XSS via an SVG document that is mishandled by (1) the Insert Media option in the content editor or (2) an silverstripe/cms
- CVE-2017-2299Versions of the puppetlabs-apache module prior to 1.11.1 and 2.1.0 make it very easy to accidentally misconfigure TLS trust.puppetlabs-apache
- CVE-2017-10813CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
- CVE-2017-10814Buffer overflow in CG-WLR300NM Firmware version 1.90 and earlier allows an attacker to execute arbitrary code via unspecified vectors.Corega CG-WLR300NM
- CVE-2017-10845Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perforNTT DOCOMO Wi-Fi STATION L-02F
- CVE-2017-10846Wi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access restrictions to obtain information on device NTT DOCOMO Wi-Fi STATION L-02F
- CVE-2017-10855Untrusted search path vulnerability in FENCE-Explorer for Windows V8.4.1 and earlier allows an attacker to gain privileges via a Trojan horsFUJITSU LIMITED FENCE-Explorer for Windows
- CVE-2017-10856SEIL/X 4.60 to 5.72, SEIL/B1 4.60 to 5.72, SEIL/x86 3.20 to 5.72, SEIL/BPV4 5.00 to 5.72 allows remote attackers to cause a temporary failurInternet Initiative Japan SEIL/X · Internet Initiative J… +2
- CVE-2017-10858Untrusted search path vulnerability in "i-filter 6.0 install program" file version 1.0.8.1 and earlier allows an attacker to gain privilegesDigital Arts "i-filter 6.0 install program"
- CVE-2017-10859Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to Digital Arts "i-filter 6.0 installer"
- CVE-2017-10860Untrusted search path vulnerability in "i-filter 6.0 installer" timestamp of code signing is before 23 Aug 2017 (JST) allows an attacker to Digital Arts "i-filter 6.0 installer"
- CVE-2017-4924VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before 8.5.8) contain an out-of-VMware ESXi · VMware Workstation +1
- CVE-2017-4925VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SGVMware ESXi · VMware Workstation +1
- CVE-2017-4926VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS).VMware vCenter Server
- CVE-2017-14340The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the Linux kernel before 4.13.2 does not verify that a filesystem has a realtime dev
- CVE-2017-14483flower.initd in the Gentoo dev-python/flower package before 0.9.1-r1 for Celery Flower sets PID file ownership to a non-root account, which
- CVE-2017-14484The Gentoo sci-mathematics/gimps package before 28.10-r1 for Great Internet Mersenne Prime Search (GIMPS) allows local users to gain privile
- CVE-2017-14489The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users to cause a denial of s