# CVEs published 2017-10-05

43 CVEs were published on October 5, 2017: 0 critical, 3 high. Days are UTC.

- [CVE-2017-12732](https://cve.now/CVE-2017-12732.md): A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. (no CVSS, GE CIMPLICITY)
- [CVE-2017-13992](https://cve.now/CVE-2017-13992.md): An Insufficient Entropy issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. (no CVSS, LOYTEC LVIS-3ME)
- [CVE-2017-13994](https://cve.now/CVE-2017-13994.md): A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. (no CVSS, LOYTEC LVIS-3ME)
- [CVE-2017-13996](https://cve.now/CVE-2017-13996.md): A Relative Path Traversal issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. (no CVSS, LOYTEC LVIS-3ME)
- [CVE-2017-13998](https://cve.now/CVE-2017-13998.md): An Insufficiently Protected Credentials issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. (no CVSS, LOYTEC LVIS-3ME)
- [CVE-2017-15041](https://cve.now/CVE-2017-15041.md): Go before 1.8.4 and 1.9.x before 1.9.1 allows "go get" remote command execution. (no CVSS, toolchain)
- [CVE-2017-15042](https://cve.now/CVE-2017-15042.md): An unintended cleartext issue exists in Go before 1.8.4 and 1.9.x before 1.9.1. (no CVSS, stdlib)
- [CVE-2017-12106](https://cve.now/CVE-2017-12106.md): A memory corruption vulnerability exists in the .TGA parsing functionality of Computerinsel Photoline 20.02. (CVSS 8.8, Talos Computerinsel Photoline)
- [CVE-2017-2880](https://cve.now/CVE-2017-2880.md): An memory corruption vulnerability exists in the .GIF parsing functionality of Computerinsel Photoline 20.02. (CVSS 8.8, Talos Computerinsel Photoline)
- [CVE-2017-2920](https://cve.now/CVE-2017-2920.md): An memory corruption vulnerability exists in the .SVG parsing functionality of Computerinsel Photoline 20.02. (CVSS 8.8, Talos Computerinsel Photoline)
- [CVE-2016-8937](https://cve.now/CVE-2016-8937.md): The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due (no CVSS, IBM Spectrum Protect)
- [CVE-2017-1201](https://cve.now/CVE-2017-1201.md): IBM BigFix Compliance Analytics 1.9.79 (TEMA SUAv1 SCA SCM) stores user credentials in clear text which can be read by a local user. (no CVSS, IBM BigFix Compliance Analytics)
- [CVE-2017-1301](https://cve.now/CVE-2017-1301.md): IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. (no CVSS, IBM Spectrum Protect)
- [CVE-2017-1339](https://cve.now/CVE-2017-1339.md): IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. (no CVSS, IBM Spectrum Protect)
- [CVE-2017-1378](https://cve.now/CVE-2017-1378.md): IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the applicat (no CVSS, IBM Spectrum Protect for Virtual Environments)
- [CVE-2017-1522](https://cve.now/CVE-2017-1522.md): IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vulnerable to cross-site scripting. (no CVSS, IBM Content Navigator)
- [CVE-2017-14353](https://cve.now/CVE-2017-14353.md): A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 1 (no CVSS)
- [CVE-2017-14354](https://cve.now/CVE-2017-14354.md): A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, (no CVSS)
- [CVE-2017-14083](https://cve.now/CVE-2017-14083.md): A vulnerability in Trend Micro OfficeScan 11.0 and XG allows remote unauthenticated users who can access the system to download the OfficeSc (no CVSS, Trend Micro OfficeScan)
- [CVE-2017-14084](https://cve.now/CVE-2017-14084.md): A potential Man-in-the-Middle (MitM) attack vulnerability in Trend Micro OfficeScan 11.0 and XG may allow attackers to execute arbitrary cod (no CVSS, Trend Micro OfficeScan)
- [CVE-2017-14085](https://cve.now/CVE-2017-14085.md): Information disclosure vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access the OfficeScan s (no CVSS, Trend Micro OfficeScan)
- [CVE-2017-14086](https://cve.now/CVE-2017-14086.md): Pre-authorization Start Remote Process vulnerabilities in Trend Micro OfficeScan 11.0 and XG may allow unauthenticated users who can access (no CVSS, Trend Micro OfficeScan)
- [CVE-2017-14087](https://cve.now/CVE-2017-14087.md): A Host Header Injection vulnerability in Trend Micro OfficeScan XG (12.0) may allow an attacker to spoof a particular Host header, allowing (no CVSS, Trend Micro OfficeScan)
- [CVE-2017-14088](https://cve.now/CVE-2017-14088.md): Memory Corruption Privilege Escalation vulnerabilities in Trend Micro OfficeScan 11.0 and XG allows local attackers to execute arbitrary cod (no CVSS, Trend Micro OfficeScan)
- [CVE-2017-14089](https://cve.now/CVE-2017-14089.md): An Unauthorized Memory Corruption vulnerability in Trend Micro OfficeScan 11.0 and XG may allow remote unauthenticated users who can access (no CVSS, Trend Micro OfficeScan)
- [CVE-2017-12244](https://cve.now/CVE-2017-12244.md): A vulnerability in the detection engine parsing of IPv6 packets for Cisco Firepower System Software could allow an unauthenticated, remote a (no CVSS, Cisco Firepower Detection Engine)
- [CVE-2017-12245](https://cve.now/CVE-2017-12245.md): A vulnerability in SSL traffic decryption for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker (no CVSS, Cisco Firepower Detection Engine)
- [CVE-2017-12246](https://cve.now/CVE-2017-12246.md): A vulnerability in the implementation of the direct authentication feature in Cisco Adaptive Security Appliance (ASA) Software could allow a (no CVSS, Cisco Adaptive Security Appliance Software)
- [CVE-2017-12256](https://cve.now/CVE-2017-12256.md): A vulnerability in the Akamai Connect feature of Cisco Wide Area Application Services (WAAS) Appliances could allow an unauthenticated, remo (no CVSS, Cisco Wide Area Application Services)
- [CVE-2017-12257](https://cve.now/CVE-2017-12257.md): A vulnerability in the web framework of Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site (no CVSS, Cisco WebEx Meetings Server)
- [CVE-2017-12258](https://cve.now/CVE-2017-12258.md): A vulnerability in the web-based UI of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to execute a cro (no CVSS, Cisco Unified Communications Manager)
- [CVE-2017-12263](https://cve.now/CVE-2017-12263.md): A vulnerability in the web interface of Cisco License Manager software could allow an unauthenticated, remote attacker to download and view (no CVSS, Cisco License Manager)
- [CVE-2017-12264](https://cve.now/CVE-2017-12264.md): A vulnerability in the Web Admin Interface of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of serv (no CVSS, Cisco Meeting Server)
- [CVE-2017-12265](https://cve.now/CVE-2017-12265.md): A vulnerability in the web-based management interface of Cisco Adaptive Security Appliance (ASA) Software could allow an unauthenticated, re (no CVSS, Cisco Adaptive Security Appliance Software)
- [CVE-2017-12266](https://cve.now/CVE-2017-12266.md): A vulnerability in the routine that loads DLL files in Cisco Meeting App for Windows could allow an authenticated, local attacker to run an (no CVSS, Cisco Meeting App)
- [CVE-2017-12267](https://cve.now/CVE-2017-12267.md): A vulnerability in the Independent Computing Architecture (ICA) accelerator feature for the Cisco Wide Area Application Services (WAAS) coul (no CVSS, Cisco Wide Area Application Services)
- [CVE-2017-12268](https://cve.now/CVE-2017-12268.md): A vulnerability in the Network Access Manager (NAM) of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker (no CVSS, Cisco AnyConnect Network Access Manager)
- [CVE-2017-12269](https://cve.now/CVE-2017-12269.md): A vulnerability in the web UI of Cisco Spark Messaging Software could allow an authenticated, remote attacker to perform a stored cross-site (no CVSS, Cisco Spark Messaging)
- [CVE-2017-12270](https://cve.now/CVE-2017-12270.md): A vulnerability in the gRPC code of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an unau (no CVSS, Cisco IOS XR)
- [CVE-2017-15032](https://cve.now/CVE-2017-15032.md): ImageMagick version 7.0.7-2 contains a memory leak in ReadYCBCRImage in coders/ycbcr.c. (no CVSS)
- [CVE-2017-15033](https://cve.now/CVE-2017-15033.md): ImageMagick version 7.0.7-2 contains a memory leak in ReadYUVImage in coders/yuv.c. (no CVSS)
- [CVE-2017-15035](https://cve.now/CVE-2017-15035.md): EmTec PyroBatchFTP before 3.18 allows remote servers to cause a denial of service (application crash). (no CVSS)
- [CVE-2017-15037](https://cve.now/CVE-2017-15037.md): In FreeBSD through 11.1, the smb\_strdupin function in sys/netsmb/smb\_subr.c has a race condition with a resultant out-of-bounds read, becaus (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-10-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.