# CVEs published 2017-10-13

98 CVEs were published on October 13, 2017: 3 critical, 16 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2016-1261](https://cve.now/CVE-2016-1261.md): Junos: vulnerabilities in J-Web (CVE-2016-1261) (CVSS 7.1, Juniper Networks Junos OS)
- [CVE-2016-1265](https://cve.now/CVE-2016-1265.md): Junos Space: privilege escalation vulnerabilities in Junos Space (CVSS 9.8, Juniper Networks Junos OS)
- [CVE-2016-4921](https://cve.now/CVE-2016-4921.md): Junos: IPv6 denial of service vulnerability due to resource exhaustion (CVE-2016-4921) (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2016-4922](https://cve.now/CVE-2016-4922.md): Junos: Privilege escalation vulnerabilities in Junos CLI (CVSS 8.4, Juniper Networks Junos OS)
- [CVE-2016-4923](https://cve.now/CVE-2016-4923.md): Junos J-Web: Cross Site Scripting Vulnerability (CVSS 8.0, Juniper Networks Junos OS)
- [CVE-2016-4924](https://cve.now/CVE-2016-4924.md): vMX: Information leak vulnerability (CVSS 8.4, Juniper Networks Junos OS)
- [CVE-2016-4925](https://cve.now/CVE-2016-4925.md): JUNOSe: Line Card Reset: processor exception 0x68616c74 (halt) task: scheduler, upon receipt of crafted IPv6 packet (CVSS 7.5, Juniper Networks JunosE)
- [CVE-2017-10606](https://cve.now/CVE-2017-10606.md): SRX Series: Cryptographic weakness in SRX300 Series TPM Firmware (CVSS 4.4, Juniper Networks Junos OS)
- [CVE-2017-10607](https://cve.now/CVE-2017-10607.md): Junos: rpd core due to receipt of specially crafted BGP packet (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2017-10608](https://cve.now/CVE-2017-10608.md): SRX series: Junos OS: SRX series using IPv6 Sun/MS-RPC ALGs may experience flowd crash on processing packets. (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2017-10610](https://cve.now/CVE-2017-10610.md): SRX Series: Embedded ICMP may cause the flowd process to crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2017-10611](https://cve.now/CVE-2017-10611.md): Junos: EX Series PFE and MX MPC7E/8E/9E PFE crash when fetching interface stats with 'extended-statistics' enabled (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2017-10612](https://cve.now/CVE-2017-10612.md): Junos Space: Persistent Cross site scripting in Junos Space (CVSS 8.0, Juniper Networks Junos Space)
- [CVE-2017-10613](https://cve.now/CVE-2017-10613.md): Junos OS: A kernel hang may occur due to a specific loopback filter action command (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2017-10614](https://cve.now/CVE-2017-10614.md): Junos OS: A remote unauthenticated attacker can consume large amounts of CPU and/or memory through telnetd (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2017-10615](https://cve.now/CVE-2017-10615.md): Junos: Potential remote code execution vulnerability in PAM (CVSS 9.8, Juniper Networks Junos OS)
- [CVE-2017-10616](https://cve.now/CVE-2017-10616.md): Contrail: hard coded credentials (CVSS 5.3, Juniper Networks Contrail)
- [CVE-2017-10617](https://cve.now/CVE-2017-10617.md): Contrail: XML External Entity (XXE) vulnerability (CVSS 5.0, Juniper Networks Contrail)
- [CVE-2017-10618](https://cve.now/CVE-2017-10618.md): Junos: RPD core due to BGP UPDATE with malformed optional transitive attributes (CVSS 5.9, Juniper Networks Junos OS)
- [CVE-2017-10619](https://cve.now/CVE-2017-10619.md): Junos: SRX cluster denial of service vulnerability in flowd due to multicast packets (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2017-10620](https://cve.now/CVE-2017-10620.md): SRX Series: Antivirus updates are downloaded without verification (CVSS 7.4, Juniper Networks Junos OS)
- [CVE-2017-10621](https://cve.now/CVE-2017-10621.md): Junos OS: Denial of service vulnerability in telnetd (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2017-10622](https://cve.now/CVE-2017-10622.md): Junos Space: Authentication bypass vulnerability (CVSS 9.8, Juniper Networks Junos Space)
- [CVE-2017-10623](https://cve.now/CVE-2017-10623.md): Junos Space: Insufficient verification of cluster messages (CVSS 7.1, Juniper Networks Junos Space)
- [CVE-2017-10624](https://cve.now/CVE-2017-10624.md): Junos Space: Insufficient verification of node certificates. (CVSS 7.5, Juniper Networks Junos Space)
- [CVE-2017-6223](https://cve.now/CVE-2017-6223.md): Ruckus Wireless Zone Director Controller firmware releases ZD9.9.x, ZD9.10.x, ZD9.13.0.x less than 9.13.0.0.232 contain OS Command Injection (no CVSS, Brocade Communications Systems Zone Director Controller Fir…)
- [CVE-2017-6224](https://cve.now/CVE-2017-6224.md): Ruckus Wireless Zone Director Controller firmware releases ZD9.x, ZD10.0.0.x, ZD10.0.1.x (less than 10.0.1.0.17 MR1 release) and Ruckus Wire (no CVSS, Brocade Communications Systems Zone Director Controller and…)
- [CVE-2017-15012](https://cve.now/CVE-2017-15012.md): OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 does not properly validate the input of the PUT\_FILE (no CVSS)
- [CVE-2017-15013](https://cve.now/CVE-2017-15013.md): OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an a (no CVSS)
- [CVE-2017-15014](https://cve.now/CVE-2017-15014.md): OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows auth (no CVSS)
- [CVE-2017-15276](https://cve.now/CVE-2017-15276.md): OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an a (no CVSS)
- [CVE-2016-6815](https://cve.now/CVE-2016-6815.md): In Apache Ranger before 0.6.2, users with "keyadmin" role should not be allowed to change password for users with "admin" role. (no CVSS, Apache Software Foundation Apache Ranger · org.apache.range…)
- [CVE-2017-11762](https://cve.now/CVE-2017-11762.md): The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R (no CVSS, Microsoft Graphics Component)
- [CVE-2017-11763](https://cve.now/CVE-2017-11763.md): The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R (no CVSS, Microsoft Graphics Component)
- [CVE-2017-11765](https://cve.now/CVE-2017-11765.md): The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold (no CVSS, Microsoft Windows Kernel)
- [CVE-2017-11769](https://cve.now/CVE-2017-11769.md): The Microsoft Windows TRIE component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execut (no CVSS, Microsoft Windows TRIE)
- [CVE-2017-11771](https://cve.now/CVE-2017-11771.md): The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold (no CVSS, Microsoft Windows Search)
- [CVE-2017-11772](https://cve.now/CVE-2017-11772.md): The Microsoft Windows Search component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold (no CVSS, Microsoft Windows Search)
- [CVE-2017-11774](https://cve.now/CVE-2017-11774.md): Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Micros (CVSS 7.8, KEV, Microsoft Outlook)
- [CVE-2017-11775](https://cve.now/CVE-2017-11775.md): Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site sc (no CVSS, Microsoft SharePoint Enterprise Server)
- [CVE-2017-11776](https://cve.now/CVE-2017-11776.md): Microsoft Outlook 2016 allows an attacker to obtain the email content of a user, due to how Outlook 2016 discloses user email content, aka " (no CVSS, Microsoft Outlook)
- [CVE-2017-11777](https://cve.now/CVE-2017-11777.md): Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site sc (no CVSS, Microsoft SharePoint Enterprise Server)
- [CVE-2017-11779](https://cve.now/CVE-2017-11779.md): The Microsoft Windows Domain Name System (DNS) DNSAPI.dll on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, (no CVSS, Microsoft Windows Domain Name System)
- [CVE-2017-11780](https://cve.now/CVE-2017-11780.md): The Server Message Block 1.0 (SMBv1) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold a (no CVSS, Microsoft Server Message Block)
- [CVE-2017-11781](https://cve.now/CVE-2017-11781.md): The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go (no CVSS, Microsoft Server Block Message)
- [CVE-2017-11782](https://cve.now/CVE-2017-11782.md): The Microsoft Server Block Message (SMB) on Microsoft Windows 10 1607 and Windows Server 2016, allows an elevation of privilege vulnerabilit (no CVSS, Microsoft Server Block Message)
- [CVE-2017-11783](https://cve.now/CVE-2017-11783.md): Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an elev (no CVSS, Microsoft Windows)
- [CVE-2017-11784](https://cve.now/CVE-2017-11784.md): The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold (no CVSS, Microsoft Windows Kernel)
- [CVE-2017-11785](https://cve.now/CVE-2017-11785.md): The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold (no CVSS, Microsoft Windows Kernel)
- [CVE-2017-11786](https://cve.now/CVE-2017-11786.md): Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reu (no CVSS, Microsoft Skype for Business)
- [CVE-2017-11790](https://cve.now/CVE-2017-11790.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2 (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-11792](https://cve.now/CVE-2017-11792.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user, d (no CVSS, ChakraCore, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2017-11793](https://cve.now/CVE-2017-11793.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2 (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-11794](https://cve.now/CVE-2017-11794.md): Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to how Mic (no CVSS, Microsoft Edge)
- [CVE-2017-11796](https://cve.now/CVE-2017-11796.md): ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how (no CVSS, ChakraCore, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2017-11797](https://cve.now/CVE-2017-11797.md): ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handl (no CVSS, Microsoft ChakraCore · Microsoft.ChakraCore)
- [CVE-2017-11798](https://cve.now/CVE-2017-11798.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the c (no CVSS, Microsoft Edge)
- [CVE-2017-11799](https://cve.now/CVE-2017-11799.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar (no CVSS, ChakraCore, Microsoft Edge)
- [CVE-2017-11800](https://cve.now/CVE-2017-11800.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the context (no CVSS, Microsoft Edge)
- [CVE-2017-11801](https://cve.now/CVE-2017-11801.md): ChakraCore allows an attacker to execute arbitrary code in the context of the current user, due to how the ChakraCore scripting engine handl (no CVSS, Microsoft ChakraCore · Microsoft.ChakraCore)
- [CVE-2017-11802](https://cve.now/CVE-2017-11802.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar (no CVSS, ChakraCore, Microsoft Edge)
- [CVE-2017-11804](https://cve.now/CVE-2017-11804.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar (no CVSS, ChakraCore, Microsoft Edge)
- [CVE-2017-11805](https://cve.now/CVE-2017-11805.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, (no CVSS, ChakraCore, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2017-11806](https://cve.now/CVE-2017-11806.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, (no CVSS, ChakraCore, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2017-11807](https://cve.now/CVE-2017-11807.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, (no CVSS, ChakraCore, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2017-11808](https://cve.now/CVE-2017-11808.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar (no CVSS, ChakraCore, Microsoft Edge)
- [CVE-2017-11809](https://cve.now/CVE-2017-11809.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar (no CVSS, ChakraCore, Microsoft Edge)
- [CVE-2017-11810](https://cve.now/CVE-2017-11810.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2 (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-11811](https://cve.now/CVE-2017-11811.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar (no CVSS)
- [CVE-2017-11812](https://cve.now/CVE-2017-11812.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code (no CVSS, ChakraCore, Microsoft Edge)
- [CVE-2017-11813](https://cve.now/CVE-2017-11813.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, and Windows Server 2012 R2 allows (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-11814](https://cve.now/CVE-2017-11814.md): The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold (no CVSS, Microsoft Windows Kernel)
- [CVE-2017-11815](https://cve.now/CVE-2017-11815.md): The Microsoft Server Block Message (SMB) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go (no CVSS, Microsoft Server Block Message)
- [CVE-2017-11816](https://cve.now/CVE-2017-11816.md): The Microsoft Windows Graphics Device Interface (GDI) on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows S (no CVSS, Microsoft Windows Graphics Device Interface)
- [CVE-2017-11817](https://cve.now/CVE-2017-11817.md): The Microsoft Windows Kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold (no CVSS, Microsoft Windows Kernel)
- [CVE-2017-11818](https://cve.now/CVE-2017-11818.md): The Microsoft Windows Storage component on Microsoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1 (no CVSS, Microsoft Windows Storage)
- [CVE-2017-11819](https://cve.now/CVE-2017-11819.md): Microsoft Windows 7 SP1 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft browsers handl (no CVSS, Microsoft Windows 7 SP1)
- [CVE-2017-11820](https://cve.now/CVE-2017-11820.md): Microsoft SharePoint Enterprise Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an attacker to exploit a cross-site sc (no CVSS, Microsoft SharePoint Enterprise Server)
- [CVE-2017-11821](https://cve.now/CVE-2017-11821.md): ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, (no CVSS, ChakraCore, Microsoft Edge · Microsoft.ChakraCore)
- [CVE-2017-11822](https://cve.now/CVE-2017-11822.md): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2 (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-11823](https://cve.now/CVE-2017-11823.md): The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by t (no CVSS, Microsoft Device Guard)
- [CVE-2017-11824](https://cve.now/CVE-2017-11824.md): The Microsoft Graphics Component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R (no CVSS, Microsoft Graphics Component)
- [CVE-2017-11825](https://cve.now/CVE-2017-11825.md): Microsoft Office 2016 Click-to-Run (C2R) and Microsoft Office 2016 for Mac allow an attacker to use a specially crafted file to perform acti (no CVSS, Microsoft Office 2016, Microsoft Office 2016 for Mac)
- [CVE-2017-11826](https://cve.now/CVE-2017-11826.md): Microsoft Office 2010, SharePoint Enterprise Server 2010, SharePoint Server 2010, Web Applications, Office Web Apps Server 2010 and 2013, Wo (CVSS 7.8, KEV, Microsoft Office)
- [CVE-2017-11829](https://cve.now/CVE-2017-11829.md): Microsoft Windows 10 allows an elevation of privilege vulnerability when the Windows Update Delivery Optimization does not properly enforce (no CVSS, Microsoft Windows)
- [CVE-2017-8689](https://cve.now/CVE-2017-8689.md): The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go (no CVSS, Microsoft Kernel Mode Driver)
- [CVE-2017-8693](https://cve.now/CVE-2017-8693.md): The Microsoft Graphics Component on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information disclosur (no CVSS, Microsoft Graphics Component)
- [CVE-2017-8694](https://cve.now/CVE-2017-8694.md): The Microsoft Windows Kernel Mode Driver on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Go (no CVSS, Microsoft Kernel Mode Driver)
- [CVE-2017-8703](https://cve.now/CVE-2017-8703.md): The Microsoft Windows Subsystem for Linux on Microsoft Windows 10 1703 allows a denial of service vulnerability when it improperly handles o (no CVSS, Microsoft Windows Subsystem for Linux)
- [CVE-2017-8715](https://cve.now/CVE-2017-8715.md): The Microsoft Device Guard on Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a security feature bypass by t (no CVSS, Microsoft Device Guard)
- [CVE-2017-8717](https://cve.now/CVE-2017-8717.md): The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, (no CVSS, Microsoft JET Database Engine)
- [CVE-2017-8718](https://cve.now/CVE-2017-8718.md): The Microsoft JET Database Engine in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, (no CVSS, Microsoft JET Database Engine)
- [CVE-2017-8726](https://cve.now/CVE-2017-8726.md): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the c (no CVSS, Microsoft Edge)
- [CVE-2017-8727](https://cve.now/CVE-2017-8727.md): Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607 (no CVSS, Microsoft Windows Text Services Framework)
- [CVE-2016-5789](https://cve.now/CVE-2016-5789.md): A Cross-site Request Forgery issue was discovered in JanTek JTC-200, all versions. (no CVSS)
- [CVE-2016-5791](https://cve.now/CVE-2016-5791.md): An Improper Authentication issue was discovered in JanTek JTC-200, all versions. (no CVSS)
- [CVE-2017-5789](https://cve.now/CVE-2017-5789.md): HPE LoadRunner before 12.53 Patch 4 and HPE Performance Center before 12.53 Patch 4 allow remote attackers to execute arbitrary code via uns (no CVSS, HPE LoadRunner and Performance Center)
- [CVE-2017-5791](https://cve.now/CVE-2017-5791.md): The doFilter method in UrlAccessController in HPE Intelligent Management Center (iMC) PLAT 7.2 E0403P06 allows remote bypass of authenticati (no CVSS, HPE Intelligent Management Center (IMC) PLAT)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-10-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.