# CVEs published 2017-09-27

50 CVEs were published on September 27, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-14838](https://cve.now/CVE-2017-14838.md): TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange. (no CVSS)
- [CVE-2017-14839](https://cve.now/CVE-2017-14839.md): TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover. (no CVSS)
- [CVE-2017-14840](https://cve.now/CVE-2017-14840.md): TeamWork TicketPlus allows Arbitrary File Upload in updateProfile. (no CVSS)
- [CVE-2017-14841](https://cve.now/CVE-2017-14841.md): Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in profilesetting image handling. (no CVSS)
- [CVE-2017-14842](https://cve.now/CVE-2017-14842.md): Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter. (no CVSS)
- [CVE-2017-14843](https://cve.now/CVE-2017-14843.md): Mojoomla School Management System for WordPress allows SQL Injection via the id parameter. (no CVSS)
- [CVE-2017-14844](https://cve.now/CVE-2017-14844.md): Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter. (no CVSS)
- [CVE-2017-14845](https://cve.now/CVE-2017-14845.md): Mojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter. (no CVSS)
- [CVE-2017-14846](https://cve.now/CVE-2017-14846.md): Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter. (no CVSS)
- [CVE-2017-14847](https://cve.now/CVE-2017-14847.md): Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter. (no CVSS)
- [CVE-2014-9686](https://cve.now/CVE-2014-9686.md): The Googlemaps plugin 3.2 and earlier for Joomla! allows remote attackers with control of a sub-domain belonging to a victim domain to cause (no CVSS)
- [CVE-2015-1526](https://cve.now/CVE-2015-1526.md): The media\_server component in Android allows remote attackers to cause a denial of service via a crafted application. (no CVSS)
- [CVE-2015-1537](https://cve.now/CVE-2015-1537.md): Integer overflow in IHDCP.cpp in the media\_server component in Android allows remote attackers to execute arbitrary code via a crafted appli (no CVSS)
- [CVE-2015-7349](https://cve.now/CVE-2015-7349.md): Cross-site scripting (XSS) vulnerability in the sample feedback.inc file in VASCO DIGIPASS authentication plug-in for Citrix Web Interface a (no CVSS)
- [CVE-2017-11191](https://cve.now/CVE-2017-11191.md): FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-locking restrictions via an unlock action (no CVSS)
- [CVE-2015-3138](https://cve.now/CVE-2015-3138.md): print-wb.c in tcpdump before 4.7.4 allows remote attackers to cause a denial of service (segmentation fault and process crash). (no CVSS)
- [CVE-2015-7256](https://cve.now/CVE-2015-7256.md): ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A, VMG1312-B30A, VMG13 (no CVSS)
- [CVE-2014-8878](https://cve.now/CVE-2014-8878.md): KDE KMail does not encrypt attachments in emails when "automatic encryption" is enabled, which allows remote attackers to obtain sensitive i (no CVSS)
- [CVE-2015-5613](https://cve.now/CVE-2015-5613.md): Cross-site scripting (XSS) vulnerability in October CMS build 271 and earlier allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2015-8249](https://cve.now/CVE-2015-8249.md): The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary fil (no CVSS)
- [CVE-2017-11120](https://cve.now/CVE-2017-11120.md): On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger (no CVSS)
- [CVE-2017-11121](https://cve.now/CVE-2017-11121.md): On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, properly crafted malicious over-the-air Fast Transition frames can pote (no CVSS)
- [CVE-2017-12814](https://cve.now/CVE-2017-12814.md): Stack-based buffer overflow in the CPerlHost::Add method in win32/perlhost.h in Perl before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 on Windo (no CVSS)
- [CVE-2017-1407](https://cve.now/CVE-2017-1407.md): IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the (no CVSS, IBM Security Identity Manager)
- [CVE-2017-14524](https://cve.now/CVE-2017-14524.md): Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitr (no CVSS)
- [CVE-2017-14525](https://cve.now/CVE-2017-14525.md): Multiple open redirect vulnerabilities in OpenText Documentum Webtop 6.8.0160.0073 allow remote attackers to redirect users to arbitrary web (no CVSS)
- [CVE-2017-14526](https://cve.now/CVE-2017-14526.md): Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Administrator 7.2.0180.0055 allow remote authenticated users t (no CVSS)
- [CVE-2017-14527](https://cve.now/CVE-2017-14527.md): Multiple XML external entity (XXE) vulnerabilities in the OpenText Documentum Webtop 6.8.0160.0073 allow remote authenticated users to list (no CVSS)
- [CVE-2017-14622](https://cve.now/CVE-2017-14622.md): Multiple cross-site scripting (XSS) vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attack (no CVSS)
- [CVE-2017-14795](https://cve.now/CVE-2017-14795.md): The hevc\_write\_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (out-of-bounds read and appli (no CVSS)
- [CVE-2017-14796](https://cve.now/CVE-2017-14796.md): The hevc\_write\_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (integer underflow and applic (no CVSS)
- [CVE-2017-1483](https://cve.now/CVE-2017-1483.md): IBM Security Identity Manager Adapters 6.0 and 7.0 does not perform an authentication check for a critical resource or functionality allowin (no CVSS, IBM Security Identity Manager)
- [CVE-2017-1577](https://cve.now/CVE-2017-1577.md): IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. (no CVSS, IBM WebSphere Portal)
- [CVE-2017-1591](https://cve.now/CVE-2017-1591.md): IBM WebSphere DataPower Appliances 7.0.0 through 7.6 is vulnerable to cross-site scripting. (no CVSS, IBM DataPower Gateways)
- [CVE-2017-10932](https://cve.now/CVE-2017-10932.md): All versions prior to V12.17.20 of the ZTE Microwave NR8000 series products - NR8120, NR8120A, NR8120, NR8150, NR8250, NR8000 TR and NR8950 (no CVSS, ZTE NR8000 Series)
- [CVE-2017-12621](https://cve.now/CVE-2017-12621.md): During Jelly (xml) file parsing with Apache Xerces, if a custom doctype entity is declared with a "SYSTEM" entity with a URL and that entity (no CVSS, Apache Software Foundation Apache Commons Jelly · commons-j…)
- [CVE-2017-14775](https://cve.now/CVE-2017-14775.md): Laravel before 5.5.10 mishandles the remember\_me token verification process because DatabaseUserProvider does not have constant-time token c (no CVSS, laravel/framework · illuminate/auth)
- [CVE-2017-2551](https://cve.now/CVE-2017-2551.md): Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download. (no CVSS, Inpsyde backwpup)
- [CVE-2015-1336](https://cve.now/CVE-2015-1336.md): The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to (no CVSS)
- [CVE-2015-3643](https://cve.now/CVE-2015-3643.md): usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14. (no CVSS)
- [CVE-2017-13676](https://cve.now/CVE-2017-13676.md): Norton Remove & Reinstall can be susceptible to a DLL preloading vulnerability. (no CVSS, Symantec Norton Remove & Reinstall)
- [CVE-2017-14760](https://cve.now/CVE-2017-14760.md): SQL Injection exists in /includes/event-management/index.php in the event-espresso-free (aka Event Espresso Lite) plugin v3.1.37.12.L for Wo (no CVSS)
- [CVE-2017-14761](https://cve.now/CVE-2017-14761.md): In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter. (no CVSS, genix/cms)
- [CVE-2017-14762](https://cve.now/CVE-2017-14762.md): In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter. (no CVSS, genix/cms)
- [CVE-2017-14763](https://cve.now/CVE-2017-14763.md): In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of (no CVSS, genix/cms)
- [CVE-2017-14764](https://cve.now/CVE-2017-14764.md): In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of (no CVSS, genix/cms)
- [CVE-2017-14765](https://cve.now/CVE-2017-14765.md): In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request. (no CVSS, genix/cms)
- [CVE-2017-14766](https://cve.now/CVE-2017-14766.md): The Simple Student Result plugin before 1.6.4 for WordPress has an Authentication Bypass vulnerability because the fn\_ssr\_add\_st\_submit() fu (no CVSS)
- [CVE-2017-14767](https://cve.now/CVE-2017-14767.md): The sdp\_parse\_fmtp\_config\_h264 function in libavformat/rtpdec\_h264.c in FFmpeg before 3.3.4 mishandles empty sprop-parameter-sets values, wh (no CVSS)
- [CVE-2017-14753](https://cve.now/CVE-2017-14753.md): Cross-site scripting (XSS) vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated users to inject a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-09-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.