# CVEs published 2017-10-16

43 CVEs were published on October 16, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-15385](https://cve.now/CVE-2017-15385.md): The store\_versioninfo\_gnu\_verdef function in libr/bin/format/elf/elf.c in radare2 2.0.0 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2017-0316](https://cve.now/CVE-2017-0316.md): In GeForce Experience (GFE) 3.x before 3.10.0.55, NVIDIA Installer Framework contains a vulnerability in NVISystemService64 where a value pa (no CVSS, Nvidia GeForce Experience)
- [CVE-2017-9367](https://cve.now/CVE-2017-9367.md): A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary f (no CVSS, BlackBerry Workspaces Server)
- [CVE-2017-9368](https://cve.now/CVE-2017-9368.md): An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for se (no CVSS, BlackBerry Workspaces Server)
- [CVE-2015-7504](https://cve.now/CVE-2015-7504.md): Heap-based buffer overflow in the pcnet\_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cause a denial of servi (no CVSS)
- [CVE-2014-0208](https://cve.now/CVE-2014-0208.md): Cross-site scripting (XSS) vulnerability in the search auto-completion functionality in Foreman before 1.4.4 allows remote authenticated use (no CVSS)
- [CVE-2015-2780](https://cve.now/CVE-2015-2780.md): Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a crafted image file with (no CVSS)
- [CVE-2015-3229](https://cve.now/CVE-2015-3229.md): fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use of HTTP to download (no CVSS)
- [CVE-2015-4650](https://cve.now/CVE-2015-4650.md): Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitra (no CVSS)
- [CVE-2015-7687](https://cve.now/CVE-2015-7687.md): Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary cod (no CVSS)
- [CVE-2017-15221](https://cve.now/CVE-2017-15221.md): ASX to MP3 converter 3.1.3.7.2010.11.05 has a buffer overflow via a crafted M3U file, a related issue to CVE-2009-1324. (no CVSS)
- [CVE-2017-15265](https://cve.now/CVE-2017-15265.md): Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or p (no CVSS)
- [CVE-2017-15289](https://cve.now/CVE-2017-15289.md): The mode4and5 write functions in hw/display/cirrus\_vga.c in Qemu allow local OS guest privileged users to cause a denial of service (out-of- (no CVSS)
- [CVE-2017-15361](https://cve.now/CVE-2017-15361.md): The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, befor (no CVSS)
- [CVE-2017-15383](https://cve.now/CVE-2017-15383.md): Nero 7.10.1.0 has an unquoted BINARY\_PATH\_NAME for NBService, exploitable via a Trojan horse Nero.exe file in the %PROGRAMFILES(x86)%\\Nero d (no CVSS)
- [CVE-2017-15384](https://cve.now/CVE-2017-15384.md): rate-me.php in Rate Me 1.0 has XSS via the id field in a rate action. (no CVSS)
- [CVE-2016-4461](https://cve.now/CVE-2016-4461.md): Apache Struts 2.x before 2.3.29 allows remote attackers to execute arbitrary code via a "%{}" sequence in a tag attribute, aka forced double (no CVSS, org.apache.struts:struts2-core)
- [CVE-2017-14952](https://cve.now/CVE-2017-14952.md): Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arb (no CVSS)
- [CVE-2017-15293](https://cve.now/CVE-2017-15293.md): Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or c (no CVSS)
- [CVE-2017-15294](https://cve.now/CVE-2017-15294.md): The Java administration console in SAP CRM has XSS. (no CVSS)
- [CVE-2017-15295](https://cve.now/CVE-2017-15295.md): Xpress Server in SAP POS does not require authentication for read/write/delete file access. (no CVSS)
- [CVE-2017-15296](https://cve.now/CVE-2017-15296.md): The Java component in SAP CRM has CSRF. (no CVSS)
- [CVE-2017-15297](https://cve.now/CVE-2017-15297.md): SAP Hostcontrol does not require authentication for the SOAP SAPControl endpoint. (no CVSS)
- [CVE-2014-3702](https://cve.now/CVE-2014-3702.md): Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cau (no CVSS)
- [CVE-2014-7851](https://cve.now/CVE-2014-7851.md): oVirt 3.2.2 through 3.5.0 does not invalidate the restapi session after logout from the webadmin, which allows remote authenticated users wi (no CVSS)
- [CVE-2014-8087](https://cve.now/CVE-2014-8087.md): Cross-site scripting (XSS) vulnerability in the post highlights plugin before 2.6.1 for WordPress allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2014-8621](https://cve.now/CVE-2014-8621.md): SQL injection vulnerability in the Store Locator plugin 2.3 through 3.11 for WordPress allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2014-9147](https://cve.now/CVE-2014-9147.md): Fiyo CMS 2.0.1.8 allows remote attackers to obtain sensitive information via a direct request to the database backup file in .backup/. (no CVSS)
- [CVE-2014-9148](https://cve.now/CVE-2014-9148.md): Fiyo CMS 2.0.1.8 allows remote attackers to bypass intended access restrictions and execute the (1) "Install and Update" or (2) Backup super (no CVSS)
- [CVE-2014-0029](https://cve.now/CVE-2014-0029.md): Multiple cross-site scripting (XSS) vulnerabilities in the SAM web application in Red Hat katello-headpin allow remote attackers to inject a (no CVSS)
- [CVE-2016-8734](https://cve.now/CVE-2016-8734.md): Apache Subversion's mod\_dontdothat module and HTTP clients 1.4.0 through 1.8.16, and 1.9.0 through 1.9.4 are vulnerable to a denial-of-servi (no CVSS, Apache Software Foundation Apache Subversion)
- [CVE-2017-15370](https://cve.now/CVE-2017-15370.md): There is a heap-based buffer overflow in the ImaExpandS function of ima\_rw.c in Sound eXchange (SoX) 14.4.2. (no CVSS)
- [CVE-2017-15371](https://cve.now/CVE-2017-15371.md): There is a reachable assertion abort in the function sox\_append\_comment() in formats.c in Sound eXchange (SoX) 14.4.2. (no CVSS)
- [CVE-2017-15372](https://cve.now/CVE-2017-15372.md): There is a stack-based buffer overflow in the lsx\_ms\_adpcm\_block\_expand\_i function of adpcm.c in Sound eXchange (SoX) 14.4.2. (no CVSS)
- [CVE-2017-15373](https://cve.now/CVE-2017-15373.md): E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php (aka the search private area). (no CVSS)
- [CVE-2017-15374](https://cve.now/CVE-2017-15374.md): Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modu (no CVSS, shopware/shopware)
- [CVE-2017-15375](https://cve.now/CVE-2017-15375.md): Multiple client-side cross site scripting vulnerabilities have been discovered in the WpJobBoard v4.5.1 web-application for WordPress. (no CVSS)
- [CVE-2017-15376](https://cve.now/CVE-2017-15376.md): The TELNET service in Mobatek MobaXterm 10.4 does not require authentication, which allows remote attackers to execute arbitrary commands vi (no CVSS)
- [CVE-2017-15302](https://cve.now/CVE-2017-15302.md): In CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver (e.g., cpuz143\_x64.sys for version 1.43) that can resu (no CVSS)
- [CVE-2017-15303](https://cve.now/CVE-2017-15303.md): In CPUID CPU-Z before 1.43, there is an arbitrary memory write that results directly in elevation of privileges, because any program running (no CVSS)
- [CVE-2017-15362](https://cve.now/CVE-2017-15362.md): osTicket 1.10.1 allows arbitrary client-side JavaScript code execution on victims who click a crafted support/scp/tickets.php?status= link, (no CVSS)
- [CVE-2017-15368](https://cve.now/CVE-2017-15368.md): The wasm\_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer (no CVSS)
- [CVE-2017-15369](https://cve.now/CVE-2017-15369.md): The build\_filter\_chain function in pdf/pdf-stream.c in Artifex MuPDF before 2017-09-25 mishandles a certain case where a variable may reside (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-10-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.