CVEs published October 5, 2017
43 CVEs were published on October 5, 2017: 0 critical, 3 high.
- Published
- 43
- Critical
- 0
- High
- 3
- Medium
- 0
- Low
- 0
- Unrated
- 40
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Trend Micro OfficeScan
- 7
- LOYTEC LVIS-3ME
- 4
- IBM Spectrum Protect
- 3
- Talos Computerinsel Photoline
- 3
- Cisco Adaptive Security Appliance Software
- 2
- Cisco Firepower Detection Engine
- 2
- Cisco Wide Area Application Services
- 2
- Cisco AnyConnect Network Access Manager
- 1
- Cisco IOS XR
- 1
- Cisco License Manager
- 1
High 3
- CVE-2017-12106A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02.Talos Computerinsel Photoline
- CVE-2017-2880An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02.Talos Computerinsel Photoline
- CVE-2017-2920An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02.Talos Computerinsel Photoline
Medium, low and unrated 40
- CVE-2017-12732A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior.GE CIMPLICITY
- CVE-2017-13992An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0.LOYTEC LVIS-3ME
- CVE-2017-13994A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0.LOYTEC LVIS-3ME
- CVE-2017-13996A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0.LOYTEC LVIS-3ME
- CVE-2017-13998An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0.LOYTEC LVIS-3ME
- CVE-2017-15041Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution.toolchain
- CVE-2017-15042An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1.stdlib
- CVE-2016-8937The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due IBM Spectrum Protect
- CVE-2017-1201IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) stores user credentials in clear text which can be read by a local user.IBM BigFix Compliance Analytics
- CVE-2017-1301IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack.IBM Spectrum Protect
- CVE-2017-1339IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password.IBM Spectrum Protect
- CVE-2017-1378IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the applicatIBM Spectrum Protect for Virtual Environments
- CVE-2017-1522IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting.IBM Content Navigator
- CVE-2017-14353A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 1
- CVE-2017-14354A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32,
- CVE-2017-14083A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeScTrend Micro OfficeScan
- CVE-2017-14084A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary codTrend Micro OfficeScan
- CVE-2017-14085Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan sTrend Micro OfficeScan
- CVE-2017-14086Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access Trend Micro OfficeScan
- CVE-2017-14087A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing Trend Micro OfficeScan
- CVE-2017-14088Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary codTrend Micro OfficeScan
- CVE-2017-14089An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access Trend Micro OfficeScan
- CVE-2017-12244A vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System Software could allow an unauthenticated, remote aCisco Firepower Detection Engine
- CVE-2017-12245A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker Cisco Firepower Detection Engine
- CVE-2017-12246A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance (ASA) Software could allow aCisco Adaptive Security Appliance Software
- CVE-2017-12256A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remoCisco Wide Area Application Services
- CVE-2017-12257A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site Cisco WebEx Meetings Server
- CVE-2017-12258A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a croCisco Unified Communications Manager
- CVE-2017-12263A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view Cisco License Manager
- CVE-2017-12264A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of servCisco Meeting Server
- CVE-2017-12265A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, reCisco Adaptive Security Appliance Software
- CVE-2017-12266A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow an authenticated, local attacker to run an Cisco Meeting App
- CVE-2017-12267A vulnerability in the Independent Computing Architecture (ICA) accelerator feature for the Cisco Wide Area Application Services (WAAS) coulCisco Wide Area Application Services
- CVE-2017-12268A vulnerability in the Network Access Manager (NAM) of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker Cisco AnyConnect Network Access Manager
- CVE-2017-12269A vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated, remote attacker to perform a stored cross-siteCisco Spark Messaging
- CVE-2017-12270A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an unauCisco IOS XR
- CVE-2017-15032ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c.
- CVE-2017-15033ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c.
- CVE-2017-15035EmTec PyroBatchFTP before 3.18 allows remote servers to cause a denial of service (application crash).
- CVE-2017-15037In FreeBSD through 11.1, the smb_strdupin function in sys/netsmb/smb_subr.c has a race condition with a resultant out-of-bounds read, becaus