CVEs published October 13, 2017
98 CVEs were published on October 13, 2017: 3 critical, 16 high. 2 are now in CISA KEV.
- Published
- 98
- Critical
- 3
- High
- 16
- Medium
- 8
- Low
- 0
- Unrated
- 71
- Now in CISA KEV
- 2
- Fix available
- 11
Most affected products
- Juniper Networks Junos OS
- 18
- ChakraCore, Microsoft Edge
- 6
- ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- 6
- Microsoft Internet Explorer
- 5
- Microsoft Windows Kernel
- 5
- Juniper Networks Junos Space
- 4
- Microsoft Edge
- 4
- Microsoft Graphics Component
- 4
- Microsoft Server Block Message
- 3
- Microsoft SharePoint Enterprise Server
- 3
Critical 3
High 16
- CVE-2016-1261Junos: vulnerabilities in J-Web (CVE-2016-1261)Juniper Networks Junos OS
- CVE-2016-4921Junos: IPv6 denial of service vulnerability due to resource exhaustion (CVE-2016-4921)Juniper Networks Junos OS
- CVE-2016-4922Junos: Privilege escalation vulnerabilities in Junos CLIJuniper Networks Junos OS
- CVE-2016-4923Junos J-Web: Cross Site Scripting VulnerabilityJuniper Networks Junos OS
- CVE-2016-4924vMX: Information leak vulnerabilityJuniper Networks Junos OS
- CVE-2016-4925JUNOSe: Line Card Reset: processor exception 0x68616c74 (halt) task: scheduler, upon receipt of crafted IPv6 packetJuniper Networks JunosE
- CVE-2017-10607Junos: rpd core due to receipt of specially crafted BGP packetJuniper Networks Junos OS
- CVE-2017-10608SRX series: Junos OS: SRX series using IPv6 Sun/MS-RPC ALGs may experience flowd crash on processing packets.Juniper Networks Junos OS
- CVE-2017-10610SRX Series: Embedded ICMP may cause the flowd process to crashJuniper Networks Junos OS
- CVE-2017-10612Junos Space: Persistent Cross site scripting in Junos SpaceJuniper Networks Junos Space
- CVE-2017-10619Junos: SRX cluster denial of service vulnerability in flowd due to multicast packetsJuniper Networks Junos OS
- CVE-2017-10620SRX Series: Antivirus updates are downloaded without verificationJuniper Networks Junos OS
- CVE-2017-10623Junos Space: Insufficient verification of cluster messagesJuniper Networks Junos Space
- CVE-2017-10624Junos Space: Insufficient verification of node certificates.Juniper Networks Junos Space
- CVE-2017-11774Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how MicrosMicrosoft Outlook
- CVE-2017-11826Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, WoMicrosoft Office
Medium, low and unrated 79
- CVE-2017-10606SRX Series: Cryptographic weakness in SRX300 Series TPM FirmwareJuniper Networks Junos OS
- CVE-2017-10611Junos: EX Series PFE and MX MPC7E/8E/9E PFE crash when fetching interface stats with 'extended-statistics' enabledJuniper Networks Junos OS
- CVE-2017-10613Junos OS: A kernel hang may occur due to a specific loopback filter action commandJuniper Networks Junos OS
- CVE-2017-10614Junos OS: A remote unauthenticated attacker can consume large amounts of CPU and/or memory through telnetdJuniper Networks Junos OS
- CVE-2017-10616Contrail: hard coded credentialsJuniper Networks Contrail
- CVE-2017-10617Contrail: XML External Entity (XXE) vulnerabilityJuniper Networks Contrail
- CVE-2017-10618Junos: RPD core due to BGP UPDATE with malformed optional transitive attributesJuniper Networks Junos OS
- CVE-2017-10621Junos OS: Denial of service vulnerability in telnetdJuniper Networks Junos OS
- CVE-2017-6223Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command InjectionBrocade Communications Systems Zone Director Controller Fir…
- CVE-2017-6224Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus WireBrocade Communications Systems Zone Director Controller and…
- CVE-2017-15012OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the input of the PUT_FILE
- CVE-2017-15013OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an a
- CVE-2017-15014OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows auth
- CVE-2017-15276OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an a
- CVE-2016-6815In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role.Apache Software Foundation Apache Ranger · org.apache.range…
- CVE-2017-11762The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and RMicrosoft Graphics Component
- CVE-2017-11763The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and RMicrosoft Graphics Component
- CVE-2017-11765The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 GoldMicrosoft Windows Kernel
- CVE-2017-11769The Microsoft Windows TRIE component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code executMicrosoft Windows TRIE
- CVE-2017-11771The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 GoldMicrosoft Windows Search
- CVE-2017-11772The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 GoldMicrosoft Windows Search
- CVE-2017-11775Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scMicrosoft SharePoint Enterprise Server
- CVE-2017-11776Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user email content, aka "Microsoft Outlook
- CVE-2017-11777Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scMicrosoft SharePoint Enterprise Server
- CVE-2017-11779The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold,Microsoft Windows Domain Name System
- CVE-2017-11780The Server Message Block 1.0 (SMBv1) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold aMicrosoft Server Message Block
- CVE-2017-11781The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 GoMicrosoft Server Block Message
- CVE-2017-11782The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege vulnerabilitMicrosoft Server Block Message
- CVE-2017-11783Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elevMicrosoft Windows
- CVE-2017-11784The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 GoldMicrosoft Windows Kernel
- CVE-2017-11785The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 GoldMicrosoft Windows Kernel
- CVE-2017-11786Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reuMicrosoft Skype for Business
- CVE-2017-11790Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2Microsoft Internet Explorer
- CVE-2017-11792ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user, dChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2017-11793Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2Microsoft Internet Explorer
- CVE-2017-11794Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to how MicMicrosoft Edge
- CVE-2017-11796ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to howChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2017-11797ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handlMicrosoft ChakraCore · Microsoft.ChakraCore
- CVE-2017-11798Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the cMicrosoft Edge
- CVE-2017-11799ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrarChakraCore, Microsoft Edge
- CVE-2017-11800Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the contextMicrosoft Edge
- CVE-2017-11801ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handlMicrosoft ChakraCore · Microsoft.ChakraCore
- CVE-2017-11802ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrarChakraCore, Microsoft Edge
- CVE-2017-11804ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrarChakraCore, Microsoft Edge
- CVE-2017-11805ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2017-11806ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2017-11807ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2017-11808ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrarChakraCore, Microsoft Edge
- CVE-2017-11809ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrarChakraCore, Microsoft Edge
- CVE-2017-11810Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2Microsoft Internet Explorer
- CVE-2017-11811ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar
- CVE-2017-11812ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary codeChakraCore, Microsoft Edge
- CVE-2017-11813Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows Microsoft Internet Explorer
- CVE-2017-11814The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 GoldMicrosoft Windows Kernel
- CVE-2017-11815The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 GoMicrosoft Server Block Message
- CVE-2017-11816The Microsoft Windows Graphics Device Interface (GDI) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows SMicrosoft Windows Graphics Device Interface
- CVE-2017-11817The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 GoldMicrosoft Windows Kernel
- CVE-2017-11818The Microsoft Windows Storage component on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1Microsoft Windows Storage
- CVE-2017-11819Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers handlMicrosoft Windows 7 SP1
- CVE-2017-11820Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site scMicrosoft SharePoint Enterprise Server
- CVE-2017-11821ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, ChakraCore, Microsoft Edge · Microsoft.ChakraCore
- CVE-2017-11822Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2Microsoft Internet Explorer
- CVE-2017-11823The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by tMicrosoft Device Guard
- CVE-2017-11824The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and RMicrosoft Graphics Component
- CVE-2017-11825Microsoft Office 2016 Click-to-Run (C2R) and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform actiMicrosoft Office 2016, Microsoft Office 2016 for Mac
- CVE-2017-11829Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly enforce Microsoft Windows
- CVE-2017-8689The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 GoMicrosoft Kernel Mode Driver
- CVE-2017-8693The Microsoft Graphics Component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosurMicrosoft Graphics Component
- CVE-2017-8694The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 GoMicrosoft Kernel Mode Driver
- CVE-2017-8703The Microsoft Windows Subsystem for Linux on Microsoft Windows 10 1703 allows a denial of service vulnerability when it improperly handles oMicrosoft Windows Subsystem for Linux
- CVE-2017-8715The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by tMicrosoft Device Guard
- CVE-2017-8717The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Microsoft JET Database Engine
- CVE-2017-8718The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Microsoft JET Database Engine
- CVE-2017-8726Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the cMicrosoft Edge
- CVE-2017-8727Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607Microsoft Windows Text Services Framework
- CVE-2016-5789A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions.
- CVE-2016-5791An Improper Authentication issue was discovered in JanTek JTC-200, all versions.
- CVE-2017-5789HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via unsHPE LoadRunner and Performance Center
- CVE-2017-5791The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of authenticatiHPE Intelligent Management Center (IMC) PLAT