CVEs published October 20, 2017
19 CVEs were published on October 20, 2017: 0 critical, 0 high.
- Published
- 19
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 19
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- F5 Networks F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, D…
- 2
- Apache Software Foundation Apache James · org.apache.james:…
- 1
- F5 Networks F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Control…
- 1
- F5 Networks F5 BIG-IP PEM
- 1
- typo3/cms-backend
- 1
Medium, low and unrated 19
- CVE-2015-5177Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial o
- CVE-2015-5699The Switch Configuration Tools Backend (clcmd_server) in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands vi
- CVE-2010-3659Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 CMS 4.1.x before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x beftypo3/cms-backend
- CVE-2011-1935pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might a
- CVE-2013-6049apt-listbugs before 0.1.10 creates temporary files insecurely, which allows attackers to have unspecified impact via unknown vectors.
- CVE-2017-13127The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users v
- CVE-2017-15291Cross-site scripting (XSS) vulnerability in the Wireless MAC Filtering page in TP-LINK TL-MR3220 wireless routers allows remote attackers to
- CVE-2017-15670The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function
- CVE-2017-15671The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB_TILDE, could skip freeing allocate
- CVE-2017-12628The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issue, and thus can be uApache Software Foundation Apache James · org.apache.james:…
- CVE-2017-6141In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshakeF5 Networks F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Control…
- CVE-2017-6144In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database file via HTTPS, the server's certificate is F5 Networks F5 BIG-IP PEM
- CVE-2017-6145iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 incluF5 Networks F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, D…
- CVE-2017-6165In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 1F5 Networks F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, D…
- CVE-2017-14937The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access (SA) data to the internal CAN bus (
- CVE-2017-2131Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to bypass access restrictions to view th
- CVE-2017-2132Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allow an attacker to delete arbitrary files in a specific
- CVE-2017-2133SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000_4.47 allows authenticated attack
- CVE-2017-15651PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then pro