# CVEs published 2017-09-21

82 CVEs were published on September 21, 2017: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2017-14680](https://cve.now/CVE-2017-14680.md): ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document. (no CVSS)
- [CVE-2017-14681](https://cve.now/CVE-2017-14681.md): The daemon in P3Scan 3.0\_rc1 and earlier creates a p3scan.pid file after dropping privileges to a non-root account, which might allow local (no CVSS)
- [CVE-2017-14682](https://cve.now/CVE-2017-14682.md): GetNextToken in MagickCore/token.c in ImageMagick 7.0.6 allows remote attackers to cause a denial of service (heap-based buffer overflow and (no CVSS)
- [CVE-2017-9281](https://cve.now/CVE-2017-9281.md): An integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability in Micro Focus VisiBroker 8.5 can lead to a (no CVSS)
- [CVE-2017-9282](https://cve.now/CVE-2017-9282.md): An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus Vi (no CVSS, Micro Focus VisiBroker)
- [CVE-2017-9283](https://cve.now/CVE-2017-9283.md): An out-of-bounds read (CWE-125) vulnerability exists in Micro Focus VisiBroker 8.5. (no CVSS, Micro Focus VisiBroker)
- [CVE-2017-12170](https://cve.now/CVE-2017-12170.md): Downstream version 1.0.46-1 of pure-ftpd as shipped in Fedora was vulnerable to packaging error due to which the original configuration was (no CVSS, Red Hat pure-ftpd)
- [CVE-2017-7544](https://cve.now/CVE-2017-7544.md): libexif through 0.6.21 is vulnerable to out-of-bounds heap read vulnerability in exif\_data\_save\_data\_entry function in libexif/exif-data.c c (no CVSS, Red Hat libexif)
- [CVE-2017-7549](https://cve.now/CVE-2017-7549.md): A flaw was found in instack-undercloud 7.2.0 as packaged in Red Hat OpenStack Platform Pike, 6.1.0 as packaged in Red Hat OpenStack Platform (no CVSS, Red Hat instack-undercloud · instack-undercloud +1)
- [CVE-2017-14652](https://cve.now/CVE-2017-14652.md): SQL Injection vulnerability in mobiquo/lib/classTTForum.php in the Tapatalk plugin before 4.5.8 for MyBB allows an unauthenticated remote at (no CVSS)
- [CVE-2017-14651](https://cve.now/CVE-2017-14651.md): WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add\_collection\_ajaxprocessor.jsp via the collectionName or parentPath parameter (no CVSS)
- [CVE-2017-14638](https://cve.now/CVE-2017-14638.md): AP4\_AtomFactory::CreateAtomFromStream in Core/Ap4AtomFactory.cpp in Bento4 version 1.5.0-617 has missing NULL checks, leading to a NULL poin (no CVSS)
- [CVE-2017-14639](https://cve.now/CVE-2017-14639.md): AP4\_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617 uses incorrect character data types, which causes a stack-b (no CVSS)
- [CVE-2017-14640](https://cve.now/CVE-2017-14640.md): A NULL pointer dereference was discovered in AP4\_AtomSampleTable::GetSample in Core/Ap4AtomSampleTable.cpp in Bento4 version 1.5.0-617. (no CVSS)
- [CVE-2017-14641](https://cve.now/CVE-2017-14641.md): A NULL pointer dereference was discovered in the AP4\_DataAtom class in MetaData/Ap4MetaData.cpp in Bento4 version 1.5.0-617. (no CVSS)
- [CVE-2017-14642](https://cve.now/CVE-2017-14642.md): A NULL pointer dereference was discovered in the AP4\_HdlrAtom class in Bento4 version 1.5.0-617. (no CVSS)
- [CVE-2017-14643](https://cve.now/CVE-2017-14643.md): The AP4\_HdlrAtom class in Core/Ap4HdlrAtom.cpp in Bento4 version 1.5.0-617 uses an incorrect character data type, leading to a heap-based bu (no CVSS)
- [CVE-2017-14644](https://cve.now/CVE-2017-14644.md): A heap-based buffer overflow was discovered in the AP4\_HdlrAtom class in Bento4 1.5.0-617. (no CVSS)
- [CVE-2017-14645](https://cve.now/CVE-2017-14645.md): A heap-based buffer over-read was discovered in AP4\_BitStream::ReadBytes in Codecs/Ap4BitStream.cpp in Bento4 version 1.5.0-617. (no CVSS)
- [CVE-2017-14646](https://cve.now/CVE-2017-14646.md): The AP4\_AvccAtom and AP4\_HvccAtom classes in Bento4 version 1.5.0-617 do not properly validate data sizes, leading to a heap-based buffer ov (no CVSS)
- [CVE-2017-14647](https://cve.now/CVE-2017-14647.md): A heap-based buffer overflow was discovered in AP4\_VisualSampleEntry::ReadFields in Core/Ap4SampleEntry.cpp in Bento4 1.5.0-617. (no CVSS)
- [CVE-2017-14648](https://cve.now/CVE-2017-14648.md): A global buffer overflow was discovered in the iteration\_loop function in loop.c in BladeEnc version 0.94.2. (no CVSS)
- [CVE-2017-14649](https://cve.now/CVE-2017-14649.md): ReadOneJNGImage in coders/png.c in GraphicsMagick version 1.3.26 does not properly validate JNG data, leading to a denial of service (assert (no CVSS)
- [CVE-2017-14650](https://cve.now/CVE-2017-14650.md): A Remote Code Execution vulnerability has been found in the Horde\_Image library when using the "Im" backend that utilizes ImageMagick's "con (no CVSS)
- [CVE-2015-1187](https://cve.now/CVE-2015-1187.md): The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping\_addr parameter to ping.c (CVSS 9.8, KEV)
- [CVE-2015-3887](https://cve.now/CVE-2015-3887.md): Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan horse libproxychains4.so (no CVSS)
- [CVE-2017-12928](https://cve.now/CVE-2017-12928.md): A hard-coded password of tecn0visi0n for the dlxuser account in TecnoVISION DLX Spot Player4 (all known versions) allows remote attackers to (no CVSS)
- [CVE-2017-12929](https://cve.now/CVE-2017-12929.md): Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version \>1.5.10 allows remote authenticated users to upload arbitrary (no CVSS)
- [CVE-2017-12930](https://cve.now/CVE-2017-12930.md): SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version \>1.5.10 allows remote unauthenticated users to access the web i (no CVSS)
- [CVE-2017-14320](https://cve.now/CVE-2017-14320.md): Mirasvit Helpdesk MX before 1.5.3 might allow remote attackers to execute arbitrary code by leveraging failure to filter uploaded files. (no CVSS)
- [CVE-2017-14321](https://cve.now/CVE-2017-14321.md): Multiple cross-site scripting (XSS) vulnerabilities in the administrative interface in Mirasvit Helpdesk MX before 1.5.3 allow remote attack (no CVSS)
- [CVE-2017-10996](https://cve.now/CVE-2017-10996.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, out of bounds access is possible in c\_show(), due to compat\_ (no CVSS)
- [CVE-2017-10997](https://cve.now/CVE-2017-10997.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, using a debugfs node, a write to a PCIe register can cause c (no CVSS)
- [CVE-2017-10998](https://cve.now/CVE-2017-10998.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in audio\_aio\_ion\_lookup\_vaddr, the buffer length, which is u (no CVSS)
- [CVE-2017-10999](https://cve.now/CVE-2017-10999.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, concurrent calls into ioctl RMNET\_IOCTL\_ADD\_MUX\_CHANNEL in i (no CVSS)
- [CVE-2017-11000](https://cve.now/CVE-2017-11000.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in an ISP Camera kernel driver function, an incorrect bounds (no CVSS)
- [CVE-2017-11001](https://cve.now/CVE-2017-11001.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, the length of the MAC address is not checked which may cause (no CVSS)
- [CVE-2017-11002](https://cve.now/CVE-2017-11002.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, while processing a vendor sub-command, a buffer over-read ca (no CVSS)
- [CVE-2017-11040](https://cve.now/CVE-2017-11040.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, when reading from sysfs nodes, one can read more information (no CVSS)
- [CVE-2017-11041](https://cve.now/CVE-2017-11041.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, an output buffer is accessed in one thread and can be potent (no CVSS)
- [CVE-2017-12153](https://cve.now/CVE-2017-12153.md): A security flaw was discovered in the nl80211\_set\_rekey\_data() function in net/wireless/nl80211.c in the Linux kernel through 4.13.3. (no CVSS, kernel since v3.1-rc1 through)
- [CVE-2017-8247](https://cve.now/CVE-2017-8247.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, if there is more than one thread doing the device open opera (no CVSS)
- [CVE-2017-8250](https://cve.now/CVE-2017-8250.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, user controlled variables "nr\_cmds" and "nr\_bos" number are (no CVSS)
- [CVE-2017-8251](https://cve.now/CVE-2017-8251.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in functions msm\_isp\_check\_stream\_cfg\_cmd & msm\_isp\_stats\_up (no CVSS)
- [CVE-2017-8277](https://cve.now/CVE-2017-8277.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in the function msm\_dba\_register\_client, if the client regis (no CVSS)
- [CVE-2017-8278](https://cve.now/CVE-2017-8278.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, while reading audio data from an unspecified driver, a buffe (no CVSS)
- [CVE-2017-8280](https://cve.now/CVE-2017-8280.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operatio (no CVSS)
- [CVE-2017-8281](https://cve.now/CVE-2017-8281.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, a race condition can allow access to already freed memory wh (no CVSS)
- [CVE-2017-9676](https://cve.now/CVE-2017-9676.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, potential use after free scenarios and race conditions can o (no CVSS)
- [CVE-2017-9677](https://cve.now/CVE-2017-9677.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, in function msm\_compr\_ioctl\_shared, variable "ddp-\>params\_le (no CVSS)
- [CVE-2017-9720](https://cve.now/CVE-2017-9720.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, due to an off-by-one error in a camera driver, an out-of-bou (no CVSS)
- [CVE-2017-9724](https://cve.now/CVE-2017-9724.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, user-level permissions can be used to gain access to kernel (no CVSS)
- [CVE-2017-9725](https://cve.now/CVE-2017-9725.md): In all Qualcomm products with Android releases from CAF using the Linux kernel, during DMA allocation, due to wrong data type of size, alloc (no CVSS)
- [CVE-2015-0276](https://cve.now/CVE-2015-0276.md): Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2. (no CVSS, kallithea)
- [CVE-2015-3296](https://cve.now/CVE-2015-3296.md): Multiple cross-site scripting (XSS) vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web script or HTML via v (no CVSS, nodebb · nodebb-plugin-markdown)
- [CVE-2015-4706](https://cve.now/CVE-2015-4706.md): Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vector (no CVSS, ipython)
- [CVE-2015-5284](https://cve.now/CVE-2015-5284.md): ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world read (no CVSS)
- [CVE-2015-8559](https://cve.now/CVE-2015-8559.md): The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/log/messages. (no CVSS)
- [CVE-2017-14160](https://cve.now/CVE-2017-14160.md): The bark\_noise\_hybridmp function in psy.c in Xiph.Org libvorbis 1.3.5 allows remote attackers to cause a denial of service (out-of-bounds ac (no CVSS)
- [CVE-2017-14245](https://cve.now/CVE-2017-14245.md): An out of bounds read in the function d2alaw\_array() in alaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosur (no CVSS)
- [CVE-2017-14246](https://cve.now/CVE-2017-14246.md): An out of bounds read in the function d2ulaw\_array() in ulaw.c of libsndfile 1.0.28 may lead to a remote DoS attack or information disclosur (no CVSS)
- [CVE-2017-14635](https://cve.now/CVE-2017-14635.md): In Open Ticket Request System (OTRS) 3.3.x before 3.3.18, 4.x before 4.0.25, and 5.x before 5.0.23, remote authenticated users can leverage (no CVSS)
- [CVE-2017-14628](https://cve.now/CVE-2017-14628.md): In sam2p 0.49.3, a heap-based buffer overflow exists in the pcxLoadImage24 function of the file in\_pcx.cpp. (no CVSS)
- [CVE-2017-14629](https://cve.now/CVE-2017-14629.md): In sam2p 0.49.3, the in\_xpm\_reader function in in\_xpm.cpp has an integer signedness error, leading to a crash when writing to an out-of-boun (no CVSS)
- [CVE-2017-14630](https://cve.now/CVE-2017-14630.md): In sam2p 0.49.3, an integer overflow exists in the pcxLoadImage24 function of the file in\_pcx.cpp, leading to an invalid write operation. (no CVSS)
- [CVE-2017-14631](https://cve.now/CVE-2017-14631.md): In sam2p 0.49.3, the pcxLoadRaster function in in\_pcx.cpp has an integer signedness error leading to a heap-based buffer overflow. (no CVSS)
- [CVE-2017-14632](https://cve.now/CVE-2017-14632.md): Xiph.Org libvorbis 1.3.5 allows Remote Code Execution upon freeing uninitialized memory in the function vorbis\_analysis\_headerout() in info. (no CVSS)
- [CVE-2017-14633](https://cve.now/CVE-2017-14633.md): In Xiph.Org libvorbis 1.3.5, an out-of-bounds array read vulnerability exists in the function mapping0\_forward() in mapping0.c, which may le (no CVSS)
- [CVE-2017-14634](https://cve.now/CVE-2017-14634.md): In libsndfile 1.0.28, a divide-by-zero error exists in the function double64\_init() in double64.c, which may lead to DoS when playing a craf (no CVSS)
- [CVE-2017-12214](https://cve.now/CVE-2017-12214.md): A vulnerability in the Operations, Administration, Maintenance, and Provisioning (OAMP) credential reset functionality for Cisco Unified Cus (no CVSS, Cisco Unified Customer Voice Portal)
- [CVE-2017-12215](https://cve.now/CVE-2017-12215.md): A vulnerability in the email message filtering feature of Cisco AsyncOS Software for the Cisco Email Security Appliance could allow an unaut (no CVSS, Cisco Email Security Appliance)
- [CVE-2017-12219](https://cve.now/CVE-2017-12219.md): A vulnerability in the handling of IP fragments for the Cisco Small Business SPA300, SPA500, and SPA51x Series IP Phones could allow an unau (no CVSS, Cisco Small Business SPA300, SPA500, and SPA51x Series IP P…)
- [CVE-2017-12248](https://cve.now/CVE-2017-12248.md): A vulnerability in the web framework code of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to c (no CVSS, Cisco Unified Intelligence Center)
- [CVE-2017-12250](https://cve.now/CVE-2017-12250.md): A vulnerability in the HTTP web interface for Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to (no CVSS, Cisco Wide Area Application Services)
- [CVE-2017-12252](https://cve.now/CVE-2017-12252.md): A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attac (no CVSS, Cisco FindIT)
- [CVE-2017-12253](https://cve.now/CVE-2017-12253.md): A vulnerability in the Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to execute unwanted actions. (no CVSS, Cisco Unified Intelligence Center)
- [CVE-2017-12254](https://cve.now/CVE-2017-12254.md): A vulnerability in the web interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to perform a Docum (no CVSS, Cisco Unified Intelligence Center)
- [CVE-2017-12255](https://cve.now/CVE-2017-12255.md): A vulnerability in the CLI of Cisco UCS Central Software could allow an authenticated, local attacker to gain shell access. (no CVSS, Cisco UCS Central Software)
- [CVE-2017-14624](https://cve.now/CVE-2017-14624.md): ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function PostscriptDelegateMessage in coders/ps.c. (no CVSS)
- [CVE-2017-14625](https://cve.now/CVE-2017-14625.md): ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel\_output\_create in coders/sixel.c. (no CVSS)
- [CVE-2017-14626](https://cve.now/CVE-2017-14626.md): ImageMagick 7.0.7-0 Q16 has a NULL Pointer Dereference vulnerability in the function sixel\_decode in coders/sixel.c. (no CVSS)
- [CVE-2017-6720](https://cve.now/CVE-2017-6720.md): A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote a (no CVSS, Cisco Small Business Managed Switches)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-09-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.