CVEs published September 21, 2017
82 CVEs were published on September 21, 2017: 1 critical, 0 high. 1 is now in CISA KEV.
- Published
- 82
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 81
- Now in CISA KEV
- 1
- Fix available
- 3
Most affected products
- Cisco Unified Intelligence Center
- 3
- Micro Focus VisiBroker
- 2
- Cisco Email Security Appliance
- 1
- Cisco FindIT
- 1
- Cisco Small Business Managed Switches
- 1
- Cisco Small Business SPA300, SPA500, and SPA51x Series IP P…
- 1
- Cisco UCS Central Software
- 1
- Cisco Unified Customer Voice Portal
- 1
- Cisco Wide Area Application Services
- 1
- ipython
- 1
Critical 1
Medium, low and unrated 81
- CVE-2017-14680ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document.
- CVE-2017-14681The daemon in P3Scan 3.0_rc1 and earlier creates a p3scan.pid file after dropping privileges to a non-root account, which might allow local
- CVE-2017-14682GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and
- CVE-2017-9281An integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability in Micro Focus VisiBroker 8.5 can lead to a
- CVE-2017-9282An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus ViMicro Focus VisiBroker
- CVE-2017-9283An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5.Micro Focus VisiBroker
- CVE-2017-12170Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was Red Hat pure-ftpd
- CVE-2017-7544libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c cRed Hat libexif
- CVE-2017-7549A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack PlatformRed Hat instack-undercloud · instack-undercloud +1
- CVE-2017-14652SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote at
- CVE-2017-14651WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter
- CVE-2017-14638AP4_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL poin
- CVE-2017-14639AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-b
- CVE-2017-14640A NULL pointer dereference was discovered in AP4_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617.
- CVE-2017-14641A NULL pointer dereference was discovered in the AP4_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617.
- CVE-2017-14642A NULL pointer dereference was discovered in the AP4_HdlrAtom class in Bento4 version 1.5.0-617.
- CVE-2017-14643The AP4_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based bu
- CVE-2017-14644A heap-based buffer overflow was discovered in the AP4_HdlrAtom class in Bento4 1.5.0-617.
- CVE-2017-14645A heap-based buffer over-read was discovered in AP4_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617.
- CVE-2017-14646The AP4_AvccAtom and AP4_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer ov
- CVE-2017-14647A heap-based buffer overflow was discovered in AP4_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617.
- CVE-2017-14648A global buffer overflow was discovered in the iteration_loop function in loop.c in BladeEnc version 0.94.2.
- CVE-2017-14649ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assert
- CVE-2017-14650A Remote Code Execution vulnerability has been found in the Horde_Image library when using the "Im" backend that utilizes ImageMagick's "con
- CVE-2015-3887Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so
- CVE-2017-12928A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows remote attackers to
- CVE-2017-12929Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users to upload arbitrary
- CVE-2017-12930SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web i
- CVE-2017-14320Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter uploaded files.
- CVE-2017-14321Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attack
- CVE-2017-10996In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in c_show(), due to compat_
- CVE-2017-10997In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause c
- CVE-2017-10998In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio_aio_ion_lookup_vaddr, the buffer length, which is u
- CVE-2017-10999In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET_IOCTL_ADD_MUX_CHANNEL in i
- CVE-2017-11000In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds
- CVE-2017-11001In all Qualcomm products with Android releases from CAF using the Linux kernel, the length of the MAC address is not checked which may cause
- CVE-2017-11002In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read ca
- CVE-2017-11040In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information
- CVE-2017-11041In all Qualcomm products with Android releases from CAF using the Linux kernel, an output buffer is accessed in one thread and can be potent
- CVE-2017-12153A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3.kernel since v3.1-rc1 through
- CVE-2017-8247In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open opera
- CVE-2017-8250In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables "nr_cmds" and "nr_bos" number are
- CVE-2017-8251In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msm_isp_check_stream_cfg_cmd & msm_isp_stats_up
- CVE-2017-8277In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function msm_dba_register_client, if the client regis
- CVE-2017-8278In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffe
- CVE-2017-8280In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operatio
- CVE-2017-8281In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory wh
- CVE-2017-9676In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can o
- CVE-2017-9677In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm_compr_ioctl_shared, variable "ddp->params_le
- CVE-2017-9720In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera driver, an out-of-bou
- CVE-2017-9724In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel
- CVE-2017-9725In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, alloc
- CVE-2015-0276Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.kallithea
- CVE-2015-3296Multiple cross-site scripting (XSS) vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web script or HTML via vnodebb · nodebb-plugin-markdown
- CVE-2015-4706Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectoripython
- CVE-2015-5284ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world read
- CVE-2015-8559The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages.
- CVE-2017-14160The bark_noise_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds ac
- CVE-2017-14245An out of bounds read in the function d2alaw_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosur
- CVE-2017-14246An out of bounds read in the function d2ulaw_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosur
- CVE-2017-14635In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage
- CVE-2017-14628In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp.
- CVE-2017-14629In sam2p 0.49.3, the in_xpm_reader function in in_xpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-boun
- CVE-2017-14630In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in_pcx.cpp, leading to an invalid write operation.
- CVE-2017-14631In sam2p 0.49.3, the pcxLoadRaster function in in_pcx.cpp has an integer signedness error leading to a heap-based buffer overflow.
- CVE-2017-14632Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis_analysis_headerout() in info.
- CVE-2017-14633In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0_forward() in mapping0.c, which may le
- CVE-2017-14634In libsndfile 1.0.28, a divide-by-zero error exists in the function double64_init() in double64.c, which may lead to DoS when playing a craf
- CVE-2017-12214A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality for Cisco Unified CusCisco Unified Customer Voice Portal
- CVE-2017-12215A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unautCisco Email Security Appliance
- CVE-2017-12219A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unauCisco Small Business SPA300, SPA500, and SPA51x Series IP P…
- CVE-2017-12248A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to cCisco Unified Intelligence Center
- CVE-2017-12250A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker toCisco Wide Area Application Services
- CVE-2017-12252A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attacCisco FindIT
- CVE-2017-12253A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions.Cisco Unified Intelligence Center
- CVE-2017-12254A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to perform a DocumCisco Unified Intelligence Center
- CVE-2017-12255A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell access.Cisco UCS Central Software
- CVE-2017-14624ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c.
- CVE-2017-14625ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_output_create in coders/sixel.c.
- CVE-2017-14626ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel_decode in coders/sixel.c.
- CVE-2017-6720A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote aCisco Small Business Managed Switches