# CVEs published 2017-10-20 19 CVEs were published on October 20, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2015-5177](https://cve.now/CVE-2015-5177.md): Double free vulnerability in the SLPDKnownDAAdd function in slpd/slpd\_knownda.c in OpenSLP 1.2.1 allows remote attackers to cause a denial o (no CVSS) - [CVE-2015-5699](https://cve.now/CVE-2015-5699.md): The Switch Configuration Tools Backend (clcmd\_server) in Cumulus Linux 2.5.3 and earlier allows local users to execute arbitrary commands vi (no CVSS) - [CVE-2010-3659](https://cve.now/CVE-2010-3659.md): Multiple cross-site scripting (XSS) vulnerabilities in TYPO3 CMS 4.1.x before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4, and 4.4.x bef (no CVSS, typo3/cms-backend) - [CVE-2011-1935](https://cve.now/CVE-2011-1935.md): pcap-linux.c in libpcap 1.1.1 before commit ea9432fabdf4b33cbc76d9437200e028f1c47c93 when snaplen is set may truncate packets, which might a (no CVSS) - [CVE-2013-6049](https://cve.now/CVE-2013-6049.md): apt-listbugs before 0.1.10 creates temporary files insecurely, which allows attackers to have unspecified impact via unknown vectors. (no CVSS) - [CVE-2017-13127](https://cve.now/CVE-2017-13127.md): The VIP.com application for IOS and Android allows remote attackers to obtain sensitive information and hijack the authentication of users v (no CVSS) - [CVE-2017-15291](https://cve.now/CVE-2017-15291.md): Cross-site scripting (XSS) vulnerability in the Wireless MAC Filtering page in TP-LINK TL-MR3220 wireless routers allows remote attackers to (no CVSS) - [CVE-2017-15670](https://cve.now/CVE-2017-15670.md): The GNU C Library (aka glibc or libc6) before 2.27 contains an off-by-one error leading to a heap-based buffer overflow in the glob function (no CVSS) - [CVE-2017-15671](https://cve.now/CVE-2017-15671.md): The glob function in glob.c in the GNU C Library (aka glibc or libc6) before 2.27, when invoked with GLOB\_TILDE, could skip freeing allocate (no CVSS) - [CVE-2017-12628](https://cve.now/CVE-2017-12628.md): The JMX server embedded in Apache James, also used by the command line client is exposed to a java de-serialization issue, and thus can be u (no CVSS, Apache Software Foundation Apache James · org.apache.james:…) - [CVE-2017-6141](https://cve.now/CVE-2017-6141.md): In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, and WebSafe 12.1.0 through 12.1.2, certain values in a TLS abbreviated handshake (no CVSS, F5 Networks F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Control…) - [CVE-2017-6144](https://cve.now/CVE-2017-6144.md): In F5 BIG-IP PEM 12.1.0 through 12.1.2 when downloading the Type Allocation Code (TAC) database file via HTTPS, the server's certificate is (no CVSS, F5 Networks F5 BIG-IP PEM) - [CVE-2017-6145](https://cve.now/CVE-2017-6145.md): iControl REST in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM, and WebSafe 12.0.0 through 12.1.2 and 13.0.0 inclu (no CVSS, F5 Networks F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, D…) - [CVE-2017-6165](https://cve.now/CVE-2017-6165.md): In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, and WebSafe 11.5.1 HF6 through 11.5.4 HF4, 11.6.0 through 1 (no CVSS, F5 Networks F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, D…) - [CVE-2017-14937](https://cve.now/CVE-2017-14937.md): The airbag detonation algorithm allows injury to passenger-car occupants via predictable Security Access (SA) data to the internal CAN bus ( (no CVSS) - [CVE-2017-2131](https://cve.now/CVE-2017-2131.md): Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000\_4.47 allow an attacker to bypass access restrictions to view th (no CVSS) - [CVE-2017-2132](https://cve.now/CVE-2017-2132.md): Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000\_4.47 allow an attacker to delete arbitrary files in a specific (no CVSS) - [CVE-2017-2133](https://cve.now/CVE-2017-2133.md): SQL injection vulnerability in Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB1000\_4.47 allows authenticated attack (no CVSS) - [CVE-2017-15651](https://cve.now/CVE-2017-15651.md): PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then pro (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-10-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.