# CVEs published 2017-10-19

229 CVEs were published on October 19, 2017: 0 critical, 2 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2017-14017](https://cve.now/CVE-2017-14017.md): An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. (no CVSS, Progea Movicon SCADA/HMI)
- [CVE-2017-14019](https://cve.now/CVE-2017-14019.md): An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior. (no CVSS, Progea Movicon SCADA/HMI)
- [CVE-2017-15650](https://cve.now/CVE-2017-15650.md): musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dns\_parse\_callback in network/lookup\_name.c does not restrict (no CVSS)
- [CVE-2017-15643](https://cve.now/CVE-2017-15643.md): An active network attacker (MiTM) can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7. (no CVSS)
- [CVE-2017-15644](https://cve.now/CVE-2017-15644.md): SSRF exists in Webmin 1.850 via the PATH\_INFO to tunnel/link.cgi, as demonstrated by a GET request for tunnel/link.cgi/http://INTRANET-IP:80 (no CVSS)
- [CVE-2017-15645](https://cve.now/CVE-2017-15645.md): CSRF exists in Webmin 1.850. (no CVSS)
- [CVE-2017-15646](https://cve.now/CVE-2017-15646.md): Webmin before 1.860 has XSS with resultant remote code execution. (no CVSS)
- [CVE-2017-15647](https://cve.now/CVE-2017-15647.md): On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value. (no CVSS)
- [CVE-2017-15648](https://cve.now/CVE-2017-15648.md): In PHPSUGAR PHP Melody before 2.7.3, page\_manager.php has XSS via the page\_title parameter. (no CVSS)
- [CVE-2017-15649](https://cve.now/CVE-2017-15649.md): net/packet/af\_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls that trigger mishand (no CVSS)
- [CVE-2012-4379](https://cve.now/CVE-2012-4379.md): MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to (no CVSS)
- [CVE-2012-4380](https://cve.now/CVE-2012-4380.md): MediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass GlobalBlocking extension IP address blocking and create (no CVSS)
- [CVE-2012-4382](https://cve.now/CVE-2012-4382.md): MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not properly protect user block metadata, which allows remote administrators to read (no CVSS)
- [CVE-2015-4421](https://cve.now/CVE-2015-4421.md): The tzdriver module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a (no CVSS)
- [CVE-2015-4422](https://cve.now/CVE-2015-4422.md): The TEEOS module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain pr (no CVSS)
- [CVE-2015-6668](https://cve.now/CVE-2015-6668.md): The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a brute force attack to the WordPress upload dir (no CVSS)
- [CVE-2017-10933](https://cve.now/CVE-2017-10933.md): All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulner (no CVSS, ZTE ZXDT22 SF01)
- [CVE-2016-8748](https://cve.now/CVE-2016-8748.md): In Apache NiFi before 1.0.1 and 1.1.x before 1.1.1, there is a cross-site scripting vulnerability in connection details dialog when accessed (no CVSS, Apache Software Foundation Apache NiFi · org.apache.nifi:ni…)
- [CVE-2017-5635](https://cve.now/CVE-2017-5635.md): In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the o (no CVSS, Apache Software Foundation Apache NiFi · org.apache.nifi:ni…)
- [CVE-2017-5636](https://cve.now/CVE-2017-5636.md): In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an (no CVSS, Apache Software Foundation Apache NiFi · org.apache.nifi:ni…)
- [CVE-2012-6707](https://cve.now/CVE-2012-6707.md): WordPress through 4.8.2 uses a weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values (no CVSS)
- [CVE-2017-10955](https://cve.now/CVE-2017-10955.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0. (CVSS 8.8, Dell EMC Data Protection Advisor)
- [CVE-2017-15639](https://cve.now/CVE-2017-15639.md): tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the "draggable feeds" fe (no CVSS)
- [CVE-2017-15642](https://cve.now/CVE-2017-15642.md): In lsx\_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AI (no CVSS)
- [CVE-2017-10014](https://cve.now/CVE-2017-10014.md): Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RESTAPI). (no CVSS, Oracle Hospitality Hotel Mobile)
- [CVE-2017-10026](https://cve.now/CVE-2017-10026.md): Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware (subcomponent: Fabric Layer). (no CVSS, Oracle SOA Suite)
- [CVE-2017-10033](https://cve.now/CVE-2017-10033.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools). (no CVSS, Oracle WebCenter Sites)
- [CVE-2017-10034](https://cve.now/CVE-2017-10034.md): Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Core Formatting API). (no CVSS, Oracle BI Publisher)
- [CVE-2017-10037](https://cve.now/CVE-2017-10037.md): Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API). (no CVSS, Oracle BI Publisher)
- [CVE-2017-10050](https://cve.now/CVE-2017-10050.md): Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). (no CVSS, Oracle Hospitality Suite8)
- [CVE-2017-10051](https://cve.now/CVE-2017-10051.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2017-10054](https://cve.now/CVE-2017-10054.md): Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcomponent: MMS). (no CVSS, Oracle Hospitality Cruise Materials Management)
- [CVE-2017-10055](https://cve.now/CVE-2017-10055.md): Vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware (subcomponent: Admin Graphical User Interface). (no CVSS, Oracle iPlanet Web Server)
- [CVE-2017-10060](https://cve.now/CVE-2017-10060.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web Gene (no CVSS, Oracle Business Intelligence Enterprise Edition)
- [CVE-2017-10065](https://cve.now/CVE-2017-10065.md): Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: Security). (no CVSS)
- [CVE-2017-10066](https://cve.now/CVE-2017-10066.md): Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite (subcomponent: Oracle Forms). (no CVSS, Oracle E-Business Suite Technology Stack)
- [CVE-2017-10077](https://cve.now/CVE-2017-10077.md): Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: AD Utilities). (no CVSS, Oracle Applications DBA)
- [CVE-2017-10099](https://cve.now/CVE-2017-10099.md): Vulnerability in the SPARC M7, T7, S7 based Servers component of Oracle Sun Systems Products Suite (subcomponent: Firmware). (no CVSS, Oracle SPARC - Sun System Firmware - NPE)
- [CVE-2017-10152](https://cve.now/CVE-2017-10152.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). (no CVSS, Oracle WebLogic Server)
- [CVE-2017-10153](https://cve.now/CVE-2017-10153.md): Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications (subcomponent: Security (no CVSS, Oracle Communications WebRTC Session Controller)
- [CVE-2017-10154](https://cve.now/CVE-2017-10154.md): Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). (no CVSS, Oracle Access Manager)
- [CVE-2017-10155](https://cve.now/CVE-2017-10155.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10158](https://cve.now/CVE-2017-10158.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Core). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-10159](https://cve.now/CVE-2017-10159.md): Vulnerability in the Oracle Communications Policy Management component of Oracle Communications Applications (subcomponent: Portal, CMP). (no CVSS, Oracle Communications Policy Management)
- [CVE-2017-10161](https://cve.now/CVE-2017-10161.md): Vulnerability in the Oracle Engineering Data Management component of Oracle Supply Chain Products Suite (subcomponent: Web Services Security (no CVSS, Oracle Agile Engineering Data Management)
- [CVE-2017-10162](https://cve.now/CVE-2017-10162.md): Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services). (no CVSS, Oracle Siebel Core - Server Framework)
- [CVE-2017-10163](https://cve.now/CVE-2017-10163.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web Gene (no CVSS, Oracle Business Intelligence Enterprise Edition)
- [CVE-2017-10164](https://cve.now/CVE-2017-10164.md): Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Office). (no CVSS, Oracle PeopleSoft Enterprise FIN Staffing Front Office)
- [CVE-2017-10165](https://cve.now/CVE-2017-10165.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10166](https://cve.now/CVE-2017-10166.md): Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: C Oracle SSL API). (no CVSS, Oracle Security Service)
- [CVE-2017-10167](https://cve.now/CVE-2017-10167.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10190](https://cve.now/CVE-2017-10190.md): Vulnerability in the Java VM component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2017-10194](https://cve.now/CVE-2017-10194.md): Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Manage (no CVSS, Oracle SSM - (hot-tamale) ILOM: Integrated Lights Out Manag…)
- [CVE-2017-10197](https://cve.now/CVE-2017-10197.md): Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Folios). (no CVSS, Oracle Hospitality OPERA 5 Property Services)
- [CVE-2017-10203](https://cve.now/CVE-2017-10203.md): Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net). (no CVSS, Oracle MySQL Connectors)
- [CVE-2017-10227](https://cve.now/CVE-2017-10227.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10259](https://cve.now/CVE-2017-10259.md): Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). (no CVSS)
- [CVE-2017-10260](https://cve.now/CVE-2017-10260.md): Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Manage (no CVSS, Oracle SSM - (hot-tamale) ILOM: Integrated Lights Out Manag…)
- [CVE-2017-10261](https://cve.now/CVE-2017-10261.md): Vulnerability in the XML Database component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2017-10263](https://cve.now/CVE-2017-10263.md): Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). (no CVSS, Oracle Siebel UI Framework)
- [CVE-2017-10264](https://cve.now/CVE-2017-10264.md): Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). (no CVSS, Oracle Siebel UI Framework)
- [CVE-2017-10265](https://cve.now/CVE-2017-10265.md): Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Manage (no CVSS, Oracle SSM - (hot-tamale) ILOM: Integrated Lights Out Manag…)
- [CVE-2017-10268](https://cve.now/CVE-2017-10268.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10270](https://cve.now/CVE-2017-10270.md): Vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware (subcomponent: Microsoft Active Directory). (no CVSS, Oracle Identity Manager Connector)
- [CVE-2017-10271](https://cve.now/CVE-2017-10271.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). (CVSS 7.5, KEV, Oracle WebLogic Server)
- [CVE-2017-10274](https://cve.now/CVE-2017-10274.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO). (no CVSS, Oracle Java)
- [CVE-2017-10275](https://cve.now/CVE-2017-10275.md): Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Filesystem). (no CVSS, Oracle Solaris Operating System)
- [CVE-2017-10276](https://cve.now/CVE-2017-10276.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10277](https://cve.now/CVE-2017-10277.md): Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net). (no CVSS, Oracle MySQL Connectors)
- [CVE-2017-10279](https://cve.now/CVE-2017-10279.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10280](https://cve.now/CVE-2017-10280.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Test Framework). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-10281](https://cve.now/CVE-2017-10281.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). (no CVSS, Oracle Java)
- [CVE-2017-10283](https://cve.now/CVE-2017-10283.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10284](https://cve.now/CVE-2017-10284.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Stored Procedure). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10285](https://cve.now/CVE-2017-10285.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). (no CVSS, Oracle Java)
- [CVE-2017-10286](https://cve.now/CVE-2017-10286.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). (no CVSS)
- [CVE-2017-10287](https://cve.now/CVE-2017-10287.md): Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing). (no CVSS, Oracle PeopleSoft Enterprise SCM Strategic Sourcing)
- [CVE-2017-10292](https://cve.now/CVE-2017-10292.md): Vulnerability in the RDBMS Security component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2017-10293](https://cve.now/CVE-2017-10293.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). (no CVSS, Oracle Java)
- [CVE-2017-10294](https://cve.now/CVE-2017-10294.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10295](https://cve.now/CVE-2017-10295.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). (no CVSS, Oracle Java)
- [CVE-2017-10296](https://cve.now/CVE-2017-10296.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10299](https://cve.now/CVE-2017-10299.md): Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security). (no CVSS, Oracle Agile PLM Framework)
- [CVE-2017-10300](https://cve.now/CVE-2017-10300.md): Vulnerability in the Siebel CRM Desktop component of Oracle Siebel CRM (subcomponent: Siebel Business Service Issues). (no CVSS, Oracle Siebel CRM Desktop)
- [CVE-2017-10302](https://cve.now/CVE-2017-10302.md): Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). (no CVSS, Oracle Siebel UI Framework)
- [CVE-2017-10303](https://cve.now/CVE-2017-10303.md): Vulnerability in the Oracle Interaction Center Intelligence component of Oracle E-Business Suite (subcomponent: Setup). (no CVSS, Oracle Interaction Center Intelligence)
- [CVE-2017-10304](https://cve.now/CVE-2017-10304.md): Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security). (no CVSS, Oracle PeopleSoft Enterprise HCM Human Resources)
- [CVE-2017-10306](https://cve.now/CVE-2017-10306.md): Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security). (no CVSS, Oracle PeopleSoft Enterprise HCM Human Resources)
- [CVE-2017-10308](https://cve.now/CVE-2017-10308.md): Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Performance). (no CVSS, Oracle Agile PLM Framework)
- [CVE-2017-10309](https://cve.now/CVE-2017-10309.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). (no CVSS, Oracle Java)
- [CVE-2017-10310](https://cve.now/CVE-2017-10310.md): Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models). (no CVSS, Oracle Hyperion Financial Reporting)
- [CVE-2017-10311](https://cve.now/CVE-2017-10311.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10312](https://cve.now/CVE-2017-10312.md): Vulnerability in the Oracle Hyperion BI+ component of Oracle Hyperion (subcomponent: UI and Visualization). (no CVSS, Oracle Hyperion BI+)
- [CVE-2017-10313](https://cve.now/CVE-2017-10313.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Group Replication GCS). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10314](https://cve.now/CVE-2017-10314.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10315](https://cve.now/CVE-2017-10315.md): Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). (no CVSS, Oracle Siebel UI Framework)
- [CVE-2017-10316](https://cve.now/CVE-2017-10316.md): Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). (no CVSS, Oracle Hospitality Suite8)
- [CVE-2017-10317](https://cve.now/CVE-2017-10317.md): Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). (no CVSS, Oracle Hospitality Suite8)
- [CVE-2017-10318](https://cve.now/CVE-2017-10318.md): Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). (no CVSS, Oracle Hospitality Suite8)
- [CVE-2017-10319](https://cve.now/CVE-2017-10319.md): Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). (no CVSS, Oracle Hospitality Suite8)
- [CVE-2017-10320](https://cve.now/CVE-2017-10320.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10321](https://cve.now/CVE-2017-10321.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2017-10322](https://cve.now/CVE-2017-10322.md): Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). (no CVSS, Oracle Common Applications Calendar)
- [CVE-2017-10323](https://cve.now/CVE-2017-10323.md): Vulnerability in the Oracle Web Applications Desktop Integrator component of Oracle E-Business Suite (subcomponent: Application Service). (no CVSS, Oracle Web Applications Desktop Integrator)
- [CVE-2017-10324](https://cve.now/CVE-2017-10324.md): Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite (subcomponent: Oracle Forms). (no CVSS, Oracle E-Business Suite Technology Stack)
- [CVE-2017-10325](https://cve.now/CVE-2017-10325.md): Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). (no CVSS, Oracle Common Applications Calendar)
- [CVE-2017-10326](https://cve.now/CVE-2017-10326.md): Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). (no CVSS, Oracle Common Applications Calendar)
- [CVE-2017-10327](https://cve.now/CVE-2017-10327.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-10328](https://cve.now/CVE-2017-10328.md): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). (no CVSS, Oracle Application Object Library)
- [CVE-2017-10329](https://cve.now/CVE-2017-10329.md): Vulnerability in the Oracle Global Order Promising component of Oracle E-Business Suite (subcomponent: Reschedule Sales Orders). (no CVSS, Oracle Global Order Promising)
- [CVE-2017-10330](https://cve.now/CVE-2017-10330.md): Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Gantt Server). (no CVSS, Oracle Common Applications)
- [CVE-2017-10331](https://cve.now/CVE-2017-10331.md): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). (no CVSS, Oracle Application Object Library)
- [CVE-2017-10332](https://cve.now/CVE-2017-10332.md): Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: Administration). (no CVSS, Oracle Universal Work Queue)
- [CVE-2017-10333](https://cve.now/CVE-2017-10333.md): Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). (no CVSS, Oracle Siebel UI Framework)
- [CVE-2017-10334](https://cve.now/CVE-2017-10334.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). (no CVSS)
- [CVE-2017-10335](https://cve.now/CVE-2017-10335.md): Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Elastic Search). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-10336](https://cve.now/CVE-2017-10336.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container). (no CVSS, Oracle WebLogic Server)
- [CVE-2017-10337](https://cve.now/CVE-2017-10337.md): Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). (no CVSS, Oracle Hospitality Suite8)
- [CVE-2017-10338](https://cve.now/CVE-2017-10338.md): Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal). (no CVSS, Oracle PeopleSoft Enterprise PRTL Interaction Hub)
- [CVE-2017-10339](https://cve.now/CVE-2017-10339.md): Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). (no CVSS, Oracle Hospitality Suite8)
- [CVE-2017-10340](https://cve.now/CVE-2017-10340.md): Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). (no CVSS, Oracle Hospitality Simphony)
- [CVE-2017-10341](https://cve.now/CVE-2017-10341.md): Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). (no CVSS, Oracle Java)
- [CVE-2017-10342](https://cve.now/CVE-2017-10342.md): Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). (no CVSS, Oracle Java)
- [CVE-2017-10343](https://cve.now/CVE-2017-10343.md): Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). (no CVSS, Oracle Hospitality Simphony)
- [CVE-2017-10344](https://cve.now/CVE-2017-10344.md): Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export). (no CVSS, Oracle Hospitality Simphony)
- [CVE-2017-10345](https://cve.now/CVE-2017-10345.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). (no CVSS, Oracle Java)
- [CVE-2017-10346](https://cve.now/CVE-2017-10346.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). (no CVSS, Oracle Java)
- [CVE-2017-10347](https://cve.now/CVE-2017-10347.md): Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization). (no CVSS, Oracle Java)
- [CVE-2017-10348](https://cve.now/CVE-2017-10348.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). (no CVSS, Oracle Java)
- [CVE-2017-10349](https://cve.now/CVE-2017-10349.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). (no CVSS, Oracle Java)
- [CVE-2017-10350](https://cve.now/CVE-2017-10350.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS). (no CVSS, Oracle Java)
- [CVE-2017-10351](https://cve.now/CVE-2017-10351.md): Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-10352](https://cve.now/CVE-2017-10352.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). (no CVSS, Oracle WebLogic Server)
- [CVE-2017-10353](https://cve.now/CVE-2017-10353.md): Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RESTAPI). (no CVSS, Oracle Hospitality Hotel Mobile)
- [CVE-2017-10354](https://cve.now/CVE-2017-10354.md): Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal). (no CVSS, Oracle PeopleSoft Enterprise PRTL Interaction Hub)
- [CVE-2017-10355](https://cve.now/CVE-2017-10355.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). (no CVSS, Oracle Java)
- [CVE-2017-10356](https://cve.now/CVE-2017-10356.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). (no CVSS, Oracle Java)
- [CVE-2017-10357](https://cve.now/CVE-2017-10357.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization). (no CVSS, Oracle Java)
- [CVE-2017-10358](https://cve.now/CVE-2017-10358.md): Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Workspace). (no CVSS, Oracle Hyperion Financial Reporting)
- [CVE-2017-10359](https://cve.now/CVE-2017-10359.md): Vulnerability in the Oracle Hyperion BI+ component of Oracle Hyperion (subcomponent: UI and Visualization). (no CVSS, Oracle Hyperion BI+)
- [CVE-2017-10360](https://cve.now/CVE-2017-10360.md): Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). (no CVSS, Oracle WebCenter Content)
- [CVE-2017-10361](https://cve.now/CVE-2017-10361.md): Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcompone (no CVSS, Oracle Hospitality Cruise Shipboard Property Management Sys…)
- [CVE-2017-10362](https://cve.now/CVE-2017-10362.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Sawbridge). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-10363](https://cve.now/CVE-2017-10363.md): Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Security). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2017-10364](https://cve.now/CVE-2017-10364.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Environment Mgmt). (no CVSS)
- [CVE-2017-10365](https://cve.now/CVE-2017-10365.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10366](https://cve.now/CVE-2017-10366.md): Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-10367](https://cve.now/CVE-2017-10367.md): Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Engagement). (no CVSS, Oracle Hospitality Simphony)
- [CVE-2017-10368](https://cve.now/CVE-2017-10368.md): Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status (no CVSS, Oracle PeopleSoft Enterprise SCM eProcurement)
- [CVE-2017-10369](https://cve.now/CVE-2017-10369.md): Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware (subcomponent: Virtual Directory Server). (no CVSS, Oracle Virtual Directory)
- [CVE-2017-10370](https://cve.now/CVE-2017-10370.md): Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). (no CVSS, Oracle Hospitality Guest Access)
- [CVE-2017-10372](https://cve.now/CVE-2017-10372.md): Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). (no CVSS, Oracle Hospitality Guest Access)
- [CVE-2017-10373](https://cve.now/CVE-2017-10373.md): Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Health Center). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-10375](https://cve.now/CVE-2017-10375.md): Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). (no CVSS, Oracle Hospitality Guest Access)
- [CVE-2017-10378](https://cve.now/CVE-2017-10378.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10379](https://cve.now/CVE-2017-10379.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). (no CVSS)
- [CVE-2017-10380](https://cve.now/CVE-2017-10380.md): Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). (no CVSS, Oracle Java)
- [CVE-2017-10381](https://cve.now/CVE-2017-10381.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-10382](https://cve.now/CVE-2017-10382.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-10383](https://cve.now/CVE-2017-10383.md): Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Interface). (no CVSS, Oracle Hospitality Guest Access)
- [CVE-2017-10384](https://cve.now/CVE-2017-10384.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). (no CVSS, Oracle MySQL Server)
- [CVE-2017-10385](https://cve.now/CVE-2017-10385.md): Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container). (no CVSS, Oracle GlassFish Server)
- [CVE-2017-10386](https://cve.now/CVE-2017-10386.md): Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). (no CVSS, Oracle Java)
- [CVE-2017-10387](https://cve.now/CVE-2017-10387.md): Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences). (no CVSS, Oracle CRM Technical Foundation)
- [CVE-2017-10388](https://cve.now/CVE-2017-10388.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). (no CVSS, Oracle Java)
- [CVE-2017-10389](https://cve.now/CVE-2017-10389.md): Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS). (no CVSS, Oracle Hospitality Suite8)
- [CVE-2017-10391](https://cve.now/CVE-2017-10391.md): Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). (no CVSS, Oracle GlassFish Server)
- [CVE-2017-10392](https://cve.now/CVE-2017-10392.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2017-10393](https://cve.now/CVE-2017-10393.md): Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container). (no CVSS, Oracle GlassFish Server)
- [CVE-2017-10394](https://cve.now/CVE-2017-10394.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-10395](https://cve.now/CVE-2017-10395.md): Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: GangwayActivityW (no CVSS, Oracle Hospitality Cruise Fleet Management)
- [CVE-2017-10396](https://cve.now/CVE-2017-10396.md): Vulnerability in the Oracle Hospitality Cruise AffairWhere component of Oracle Hospitality Applications (subcomponent: AffairWhere). (no CVSS, Oracle Hospitality Cruise AffairWhere)
- [CVE-2017-10397](https://cve.now/CVE-2017-10397.md): Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: BaseMasterPage). (no CVSS, Oracle Hospitality Cruise Fleet Management)
- [CVE-2017-10398](https://cve.now/CVE-2017-10398.md): Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: BaseMasterPage). (no CVSS, Oracle Hospitality Cruise Fleet Management)
- [CVE-2017-10399](https://cve.now/CVE-2017-10399.md): Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: GangwayActivityW (no CVSS, Oracle Hospitality Cruise Fleet Management)
- [CVE-2017-10400](https://cve.now/CVE-2017-10400.md): Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration Graphical User Interface). (no CVSS, Oracle GlassFish Server)
- [CVE-2017-10401](https://cve.now/CVE-2017-10401.md): Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcomponent: MMSUpdater). (no CVSS, Oracle Hospitality Cruise Materials Management)
- [CVE-2017-10402](https://cve.now/CVE-2017-10402.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report). (no CVSS, Oracle Hospitality Reporting and Analytics)
- [CVE-2017-10403](https://cve.now/CVE-2017-10403.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: iQuery). (no CVSS, Oracle Hospitality Reporting and Analytics)
- [CVE-2017-10404](https://cve.now/CVE-2017-10404.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: iQuery). (no CVSS, Oracle Hospitality Reporting and Analytics)
- [CVE-2017-10405](https://cve.now/CVE-2017-10405.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report). (no CVSS, Oracle Hospitality Reporting and Analytics)
- [CVE-2017-10406](https://cve.now/CVE-2017-10406.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-10407](https://cve.now/CVE-2017-10407.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2017-10408](https://cve.now/CVE-2017-10408.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2017-10409](https://cve.now/CVE-2017-10409.md): Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Merchant UI). (no CVSS, Oracle iStore)
- [CVE-2017-10410](https://cve.now/CVE-2017-10410.md): Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: Search). (no CVSS, Oracle Knowledge Management)
- [CVE-2017-10411](https://cve.now/CVE-2017-10411.md): Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface). (no CVSS, Oracle Knowledge Management)
- [CVE-2017-10412](https://cve.now/CVE-2017-10412.md): Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface). (no CVSS, Oracle Knowledge Management)
- [CVE-2017-10413](https://cve.now/CVE-2017-10413.md): Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite (subcomponent: Multiplatform Based on HTML5). (no CVSS, Oracle Mobile Field Service)
- [CVE-2017-10414](https://cve.now/CVE-2017-10414.md): Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Checkout and Order Placement). (no CVSS, Oracle iStore)
- [CVE-2017-10415](https://cve.now/CVE-2017-10415.md): Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Others). (no CVSS, Oracle iSupport)
- [CVE-2017-10416](https://cve.now/CVE-2017-10416.md): Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: Setup and Configuration). (no CVSS, Oracle Advanced Outbound Telephony)
- [CVE-2017-10417](https://cve.now/CVE-2017-10417.md): Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: Setup and Configuration). (no CVSS, Oracle Advanced Outbound Telephony)
- [CVE-2017-10418](https://cve.now/CVE-2017-10418.md): Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PeopleSoft CDA). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-10419](https://cve.now/CVE-2017-10419.md): Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS). (no CVSS, Oracle Hospitality Suite8)
- [CVE-2017-10420](https://cve.now/CVE-2017-10420.md): Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). (no CVSS, Oracle Hospitality Suite8)
- [CVE-2017-10421](https://cve.now/CVE-2017-10421.md): Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure). (no CVSS, Oracle Hospitality Suite8)
- [CVE-2017-10422](https://cve.now/CVE-2017-10422.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2017-10423](https://cve.now/CVE-2017-10423.md): Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications (subcomponent: Security). (no CVSS, Oracle Retail Back Office)
- [CVE-2017-10424](https://cve.now/CVE-2017-10424.md): Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Web). (no CVSS, Oracle MySQL Enterprise Monitor)
- [CVE-2017-10425](https://cve.now/CVE-2017-10425.md): Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Service Host). (no CVSS, Oracle Hospitality Simphony)
- [CVE-2017-10426](https://cve.now/CVE-2017-10426.md): Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Office). (no CVSS, Oracle PeopleSoft Enterprise FIN Staffing Front Office)
- [CVE-2017-10427](https://cve.now/CVE-2017-10427.md): Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale). (no CVSS, Oracle Retail Xstore Point of Service)
- [CVE-2017-10428](https://cve.now/CVE-2017-10428.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2017-3444](https://cve.now/CVE-2017-3444.md): Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). (no CVSS, Oracle Trade Management)
- [CVE-2017-3445](https://cve.now/CVE-2017-3445.md): Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). (no CVSS, Oracle Trade Management)
- [CVE-2017-3446](https://cve.now/CVE-2017-3446.md): Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). (no CVSS, Oracle Trade Management)
- [CVE-2017-3588](https://cve.now/CVE-2017-3588.md): Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: HA for MySQL). (no CVSS, Oracle Solaris Cluster)
- [CVE-2017-12579](https://cve.now/CVE-2017-12579.md): An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and earlier allows a non-ro (no CVSS)
- [CVE-2017-12251](https://cve.now/CVE-2017-12251.md): A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interact (no CVSS, Cisco Cloud Services Platform)
- [CVE-2017-12259](https://cve.now/CVE-2017-12259.md): A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA51x Series IP Phones cou (no CVSS, Cisco Small Business SPA51x Series IP Phones)
- [CVE-2017-12260](https://cve.now/CVE-2017-12260.md): A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x (no CVSS, Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP P…)
- [CVE-2017-12271](https://cve.now/CVE-2017-12271.md): A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on a (no CVSS, Cisco SPA300 and SPA500 Series IP Phones)
- [CVE-2017-12272](https://cve.now/CVE-2017-12272.md): A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site s (no CVSS, Cisco IOS XE)
- [CVE-2017-12284](https://cve.now/CVE-2017-12284.md): A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profil (no CVSS, Cisco Jabber for Windows Client)
- [CVE-2017-12285](https://cve.now/CVE-2017-12285.md): A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arb (no CVSS, Cisco Network Analysis Module)
- [CVE-2017-12286](https://cve.now/CVE-2017-12286.md): A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from (no CVSS, Cisco Jabber)
- [CVE-2017-12287](https://cve.now/CVE-2017-12287.md): A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Video Communic (no CVSS, Cisco Expressway Series and Cisco TelePresence Video Commun…)
- [CVE-2017-12288](https://cve.now/CVE-2017-12288.md): A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attacke (no CVSS, Cisco Unified Contact Center Express)
- [CVE-2017-12289](https://cve.now/CVE-2017-12289.md): A vulnerability in conditional, verbose debug logging for the IPsec feature of Cisco IOS XE Software could allow an authenticated, local att (no CVSS, Cisco IOS XE)
- [CVE-2017-12293](https://cve.now/CVE-2017-12293.md): A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. (no CVSS, Cisco WebEx Meetings Server)
- [CVE-2017-12296](https://cve.now/CVE-2017-12296.md): A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attac (no CVSS, Cisco WebEx Meetings Server)
- [CVE-2017-12298](https://cve.now/CVE-2017-12298.md): A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack (no CVSS, Cisco WebEx Meeting Center)
- [CVE-2017-12301](https://cve.now/CVE-2017-12301.md): A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python (no CVSS, Cisco NX-OS Software)
- [CVE-2017-15609](https://cve.now/CVE-2017-15609.md): Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in certain situations invol (no CVSS)
- [CVE-2017-15610](https://cve.now/CVE-2017-15610.md): An issue was discovered in Octopus before 3.17.7. (no CVSS)
- [CVE-2017-15611](https://cve.now/CVE-2017-15611.md): In Octopus before 3.17.7, an authenticated user who was explicitly granted the permission to invite new users (aka UserInvite) can invite us (no CVSS)
- [CVE-2017-15612](https://cve.now/CVE-2017-15612.md): mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\\nscript:) or a crafted email address, related to the escap (no CVSS, mistune)
- [CVE-2017-3883](https://cve.now/CVE-2017-3883.md): A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FX (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-10-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.