CVEs published October 11, 2017
55 CVEs were published on October 11, 2017: 0 critical, 2 high.
- Published
- 55
- Critical
- 0
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 53
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- Intel NUC Kits
- 4
- RSA Archer GRC Platform prior to
- 4
- Atlassian Fisheye and Crucible
- 2
- RSA Archer GRC Platform versions prior to
- 2
- Talos Simple Direct Media
- 2
- EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4…
- 1
- HackerOne RubyGems · rubygems-update
- 1
- LAVA Computer MFG Inc. Ether-Serial Link
- 1
- Linux kernel
- 1
High 2
Medium, low and unrated 53
- CVE-2017-14003An Authentication Bypass by Spoofing issue was discovered in LAVA Ether-Serial Link (ESL) running firmware versions 6.01.00/29.03.2007 and pLAVA Computer MFG Inc. Ether-Serial Link
- CVE-2017-14369RSA Archer GRC Platform prior to 6.2.0.5 is affected by a privilege escalation vulnerability.RSA Archer GRC Platform prior to
- CVE-2017-14370RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Source Asset ID field.RSA Archer GRC Platform versions prior to
- CVE-2017-14371RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting via the request URL.RSA Archer GRC Platform prior to
- CVE-2017-14372RSA Archer GRC Platform prior to 6.2.0.5 is affected by reflected cross-site scripting vulnerabilities via certain RSA Archer Help pages.RSA Archer GRC Platform prior to
- CVE-2017-8016RSA Archer GRC Platform prior to 6.2.0.5 is affected by stored cross-site scripting via the Questionnaire ID field.RSA Archer GRC Platform versions prior to
- CVE-2017-8017EMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4.1.x, and 9.4.2.x is affected by a reflected cross-site scripting Vulnerability tEMC Network Configuration Manager (NCM) 9.3.x, 9.4.0.x, 9.4…
- CVE-2017-8025RSA Archer GRC Platform prior to 6.2.0.5 is affected by an arbitrary file upload vulnerability.RSA Archer GRC Platform prior to
- CVE-2017-0903RubyGems versions between 2.0.0 and 2.6.13 are vulnerable to a possible remote code execution vulnerability.HackerOne RubyGems · rubygems-update
- CVE-2017-14587The administration user deletion resource in Atlassian Fisheye and Crucible before version 4.4.2 allows remote attackers to inject arbitraryAtlassian Fisheye and Crucible
- CVE-2017-14588Various resources in Atlassian Fisheye and Crucible before version 4.4.2 allow remote attackers to inject arbitrary HTML or JavaScript via aAtlassian Fisheye and Crucible
- CVE-2017-15239IrfanView 4.44 - 32bit with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other impact
- CVE-2017-15240IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15241IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15242IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a cr
- CVE-2017-15243IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15244IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15245IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15246IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a cr
- CVE-2017-15247IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15248IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a cr
- CVE-2017-15249IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a cr
- CVE-2017-15250IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15251IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a cr
- CVE-2017-15252IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a cr
- CVE-2017-15253IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a cr
- CVE-2017-15254IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15255IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15256IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15257IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a cr
- CVE-2017-15258IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15259IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15260IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15261IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15262IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to execute arbitrary code or cause a denial of service via a cr
- CVE-2017-15263IrfanView version 4.44 (32bit) with PDF plugin version 4.43 allows attackers to cause a denial of service or possibly have unspecified other
- CVE-2017-15264IrfanView version 4.44 (32bit) allows attackers to cause a denial of service or possibly have unspecified other impact via a crafted .tif fi
- CVE-2017-13720In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2, an attacker with access to an X connectio
- CVE-2017-13722In the pcfGetProperties function in bitmap/pcfread.c in libXfont through 1.5.2 and 2.x before 2.0.2, a missing boundary check (for PCF files
- CVE-2017-15266In GNU Libextractor 1.4, there is a Divide-By-Zero in EXTRACTOR_wav_extract_method in wav_extractor.c via a zero sample rate.
- CVE-2017-15267In GNU Libextractor 1.4, there is a NULL Pointer Dereference in flac_metadata in flac_extractor.c.
- CVE-2017-12188arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entrieLinux kernel
- CVE-2017-15220Flexense VX Search Enterprise 10.1.12 is vulnerable to a buffer overflow via an empty POST request to a long URI beginning with a /../ subst
- CVE-2013-6924Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters
- CVE-2017-7352Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web scrip
- CVE-2017-15232libjpeg-turbo 1.5.2 has a NULL Pointer Dereference in jdpostct.c and jquant1.c via a crafted JPEG file.
- CVE-2017-15235The File Manager (gollem) module 3.0.11 in Horde Groupware 5.2.21 allows remote attackers to bypass Horde authentication for file downloads
- CVE-2017-15236Tiandy IP cameras 5.56.17.120 do not properly restrict a certain proprietary protocol, which allows remote attackers to read settings via a
- CVE-2017-15238ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26 has a use-after-free issue when the height or width is zero, related to ReadJNGImag
- CVE-2017-5700Insufficient protection of password storage in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN00Intel NUC Kits
- CVE-2017-5701Insecure platform configuration in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and belowIntel NUC Kits
- CVE-2017-5721Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below aIntel NUC Kits
- CVE-2017-5722Incorrect policy enforcement in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below alIntel NUC Kits