CVEs published October 3, 2017
43 CVEs were published on October 3, 2017: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 43
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 42
- Now in CISA KEV
- 1
- Fix available
- 2
Most affected products
- Google Android
- 22
- Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products…
- 5
- Apache Software Foundation Apache Impala
- 1
- Apache Software Foundation Apache Tomcat · org.apache.to… +1
- 1
- Cloud Controller VM capi-release versions 1.33.0 and later,…
- 1
- Cloud Foundry router routing-release all versions prior to…
- 1
- IBM AIX
- 1
- IBM Integration Bus
- 1
- tough-cookie
- 1
High 1
Medium, low and unrated 42
- CVE-2017-0806An elevation of privilege vulnerability in the Android framework (gatekeeperresponse).Google Android
- CVE-2017-0807An elevation of privilege vulnerability in the Android framework (ui framework).Google Android
- CVE-2017-0808An information disclosure vulnerability in the Android framework (file system).Google Android
- CVE-2017-0809A remote code execution vulnerability in the Android media framework (libstagefright).Google Android
- CVE-2017-0810A remote code execution vulnerability in the Android media framework (libmpeg2).Google Android
- CVE-2017-0811A remote code execution vulnerability in the Android media framework (libhevc).Google Android
- CVE-2017-0812An elevation of privilege vulnerability in the Android media framework (audio hal).Google Android
- CVE-2017-0813A denial of service vulnerability in the Android media framework (libstagefright).Google Android
- CVE-2017-0814An information disclosure vulnerability in the Android media framework (n/a).Google Android
- CVE-2017-0815An information disclosure vulnerability in the Android media framework (libeffects).Google Android
- CVE-2017-0816An information disclosure vulnerability in the Android media framework (libeffects).Google Android
- CVE-2017-0817An information disclosure vulnerability in the Android media framework (libstagefright).Google Android
- CVE-2017-0818A vulnerability in the Android media framework (n/a).
- CVE-2017-0819A vulnerability in the Android media framework (n/a).Google Android
- CVE-2017-0820A vulnerability in the Android media framework (n/a).Google Android
- CVE-2017-0822An elevation of privilege vulnerability in the Android system (camera).Google Android
- CVE-2017-0823An information disclosure vulnerability in the Android system (rild).Google Android
- CVE-2017-0824An elevation of privilege vulnerability in the Broadcom wifi driver.Google Android
- CVE-2017-0825An information disclosure vulnerability in the Broadcom wifi driver.Google Android
- CVE-2017-0826An elevation of privilege vulnerability in the HTC bootloader.Google Android
- CVE-2017-0827An elevation of privilege vulnerability in the MediaTek soc driver.Google Android
- CVE-2017-0828An elevation of privilege vulnerability in the Huawei bootloader.Google Android
- CVE-2017-0829An elevation of privilege vulnerability in the Motorola bootloader.Google Android
- CVE-2017-15011The named pipes in qtsingleapp in Qt 5.x, as used in qBittorrent and SugarSync, are configured for remote access and allow remote attackers
- CVE-2017-12166OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly r
- CVE-2017-1126IBM WebSphere Message Broker (IBM Integration Bus 9.0 and 10.0) could allow an unauthorized user to obtain sensitive information about softwIBM Integration Bus
- CVE-2017-1541A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy fiIBM AIX
- CVE-2017-15008PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all sensor titles, related to incorrect error hand
- CVE-2017-15009PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page), via the errormsg pa
- CVE-2017-15010A ReDoS (regular expression denial of service) flaw was found in the tough-cookie module before 2.3.3 for Node.js.tough-cookie
- CVE-2017-12818Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leGemalto's HASP SRM, Sentinel HASP and Sentinel LDK products…
- CVE-2017-12819Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products…
- CVE-2017-12820Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTGemalto's HASP SRM, Sentinel HASP and Sentinel LDK products…
- CVE-2017-12821Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote cGemalto's HASP SRM, Sentinel HASP and Sentinel LDK products…
- CVE-2017-12822Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE versiGemalto's HASP SRM, Sentinel HASP and Sentinel LDK products…
- CVE-2017-14991The sg_ioctl function in drivers/scsi/sg.c in the Linux kernel before 4.13.4 allows local users to obtain sensitive information from uniniti
- CVE-2017-14994ReadDCMImage in coders/dcm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (NULL pointer dereference) via a
- CVE-2017-14995The Management Console in WSO2 Application Server 5.3.0, WSO2 Business Process Server 3.6.0, WSO2 Business Rules Server 2.2.0, WSO2 Complex
- CVE-2017-14997GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service (excessive memory allocation) because of an integer underflow in
- CVE-2017-8047In Cloud Foundry router routing-release all versions prior to v0.163.0 and cf-release all versions prior to v274, in some applications, it iCloud Foundry router routing-release all versions prior to…
- CVE-2017-8048In Cloud Foundry capi-release versions 1.33.0 and later, prior to 1.42.0 and cf-release versions 268 and later, prior to 274, the original fCloud Controller VM capi-release versions 1.33.0 and later,…
- CVE-2017-9792In Apache Impala (incubating) before 2.10.0, a malicious user with "ALTER" permissions on an Impala table can access any other Kudu table daApache Software Foundation Apache Impala