CVEs published September 22, 2017
41 CVEs were published on September 22, 2017: 0 critical, 0 high.
- Published
- 41
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 41
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Nvidia GPU Display Driver
- 8
- Trend Micro Mobile Security
- 3
- EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R (Watch4…
- 2
- Lenovo Group Lenovo XClarity Administrator
- 2
- CA Technologies Identity Manager
- 1
- Trend Micro InterScan Web Security Virtual Appliance
- 1
- Trend Micro Smart Protection Server
- 1
Medium, low and unrated 41
- CVE-2017-14694Foxit Reader 8.3.2.25013 and earlier and Foxit PhantomPDF 8.3.2.25013 and earlier, when running in single instance mode, allows attackers to
- CVE-2017-14712In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.
- CVE-2017-14713In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter.
- CVE-2017-14714In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter.
- CVE-2017-14715In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter.
- CVE-2017-14716In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter.
- CVE-2017-14717In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.
- CVE-2017-14705DenyAll WAF before 6.4.1 allows unauthenticated remote command execution via TCP port 3001 because shell metacharacters can be inserted into
- CVE-2017-14706DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /w
- CVE-2017-6266NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where improper access controls could allow unprivileged Nvidia GPU Display Driver
- CVE-2017-6267NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where an incorrect initialization of internal objects caNvidia GPU Display Driver
- CVE-2017-6268NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value pNvidia GPU Display Driver
- CVE-2017-6269NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a pointerNvidia GPU Display Driver
- CVE-2017-6270NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted userNvidia GPU Display Driver
- CVE-2017-6271NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiCreateAllocation where untrusted userNvidia GPU Display Driver
- CVE-2017-6272NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer handler where a value passed from a user to the driver is not coNvidia GPU Display Driver
- CVE-2017-6277NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where a value pNvidia GPU Display Driver
- CVE-2017-11395Command injection vulnerability in Trend Micro Smart Protection Server (Standalone) 3.1 and 3.2 server administration UI allows attackers wiTrend Micro Smart Protection Server
- CVE-2017-11396Vulnerability issues with the web service inspection of input parameters in Trend Micro Web Security Virtual Appliance 6.5 may allow potentiTrend Micro InterScan Web Security Virtual Appliance
- CVE-2017-14078SQL Injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbiTrend Micro Mobile Security
- CVE-2017-14079Unrestricted file uploads in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to execute arbitrarTrend Micro Mobile Security
- CVE-2017-14080Authentication bypass vulnerability in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allows attackers to access a speTrend Micro Mobile Security
- CVE-2017-14081Proxy command injection vulnerabilities in Trend Micro Mobile Security (Enterprise) versions before 9.7 Patch 3 allow remote attackers to ex
- CVE-2017-3763An attacker who obtains access to the location where the LXCA file system is stored may be able to access credentials of local LXCA accountsLenovo Group Lenovo XClarity Administrator
- CVE-2017-3770Privilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated user may be able to abuse certain web interfacLenovo Group Lenovo XClarity Administrator
- CVE-2017-9393CA Identity Manager r12.6 to r12.6 SP8, 14.0, and 14.1 allows remote attackers to potentially identify passwords of locked accounts through CA Technologies Identity Manager
- CVE-2017-14688STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, relate
- CVE-2017-14689STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, relate
- CVE-2017-14690STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to "Data from F
- CVE-2017-14691STDU Viewer 1.6.375 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .jb2 file, related
- CVE-2017-14692STDU Viewer 1.6.375 allows attackers to execute arbitrary code or cause a denial of service via a crafted .jb2 file, related to a "User Mode
- CVE-2017-14693IrfanView 4.44 - 32bit allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .djvu file, rel
- CVE-2017-14636Because of an integer overflow in sam2p 0.49.3, a loop executes 0xffffffff times, ending with an invalid read of size 1 in the Image::Indexe
- CVE-2017-14637In sam2p 0.49.3, there is an invalid read of size 2 in the parse_rgb function in in_xpm.cpp.
- CVE-2017-14653member/Orderinfo.asp in ASP4CMS AspCMS 2.7.2 allows remote authenticated users to read arbitrary order information via a modified OrderNo pa
- CVE-2017-14685Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related
- CVE-2017-14686Artifex MuPDF 1.11 allows attackers to execute arbitrary code or cause a denial of service via a crafted .xps file, related to a "User Mode
- CVE-2017-14687Artifex MuPDF 1.11 allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .xps file, related
- CVE-2017-14684In ImageMagick 7.0.7-4 Q16, a memory leak vulnerability was found in the function ReadVIPSImage in coders/vips.c, which allows attackers to
- CVE-2017-8007In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Webservice Gateway is affected by a directory traversEMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R (Watch4…
- CVE-2017-8012In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R (Watch4Net) for SAS Solution Packs, the Java Management Extensions (JMX) protocol used to comEMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R (Watch4…