# CVEs published 2017-10-23 118 CVEs were published on October 23, 2017: 0 critical, 1 high. Days are UTC. - [CVE-2017-13682](https://cve.now/CVE-2017-13682.md): In Symantec Encryption Desktop before SED 10.4.1 MP2HF1, a kernel memory leak is a type of resource leak that can occur when a computer prog (no CVSS, Symantec Encryption Desktop) - [CVE-2017-13683](https://cve.now/CVE-2017-13683.md): In Symantec Endpoint Encryption before SEE 11.1.3HF3, a kernel memory leak is a type of resource leak that can occur when a computer program (no CVSS, Symantec Endpoint Encryption) - [CVE-2011-2683](https://cve.now/CVE-2011-2683.md): reseed seeds random numbers from an insecure HTTP request to random.org during installation, which makes it easier for remote attackers to d (no CVSS) - [CVE-2011-2684](https://cve.now/CVE-2011-2684.md): foo2zjs before 20110722dfsg-3ubuntu1 as packaged in Ubuntu, 20110722dfsg-1 as packaged in Debian unstable, and 20090908dfsg-5.1+squeeze0 as (no CVSS) - [CVE-2011-4333](https://cve.now/CVE-2011-4333.md): Multiple cross-site scripting (XSS) vulnerabilities in LabWiki 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2011-4334](https://cve.now/CVE-2011-4334.md): edit.php in LabWiki 1.1 and earlier does not properly verify uploaded user files, which allows remote authenticated users to upload arbitrar (no CVSS) - [CVE-2012-4567](https://cve.now/CVE-2012-4567.md): Multiple cross-site scripting (XSS) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to inject arbitrary web (no CVSS) - [CVE-2012-4568](https://cve.now/CVE-2012-4568.md): Multiple cross-site request forgery (CSRF) vulnerabilities in LetoDMS (formerly MyDMS) before 3.3.8 allow remote attackers to hijack the aut (no CVSS) - [CVE-2012-4569](https://cve.now/CVE-2012-4569.md): Multiple cross-site scripting (XSS) vulnerabilities in out/out.UsrMgr.php in LetoDMS (formerly MyDMS) before 3.3.9 allow remote attackers to (no CVSS) - [CVE-2012-4570](https://cve.now/CVE-2012-4570.md): SQL injection vulnerability in LetoDMS\_Core/Core/inc.ClassDMS.php in LetoDMS (formerly MyDMS) before 3.3.8 allows remote attackers to execut (no CVSS) - [CVE-2013-7377](https://cve.now/CVE-2013-7377.md): The codem-transcode module before 0.5.0 for Node.js, when ffprobe is enabled, allows remote attackers to execute arbitrary commands via a PO (no CVSS, codem-transcode) - [CVE-2014-3741](https://cve.now/CVE-2014-3741.md): The printDirect function in lib/printer.js in the node-printer module 0.0.1 and earlier for Node.js allows remote attackers to execute arbit (no CVSS, printer) - [CVE-2014-3744](https://cve.now/CVE-2014-3744.md): Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (en (no CVSS, st) - [CVE-2015-2878](https://cve.now/CVE-2015-2878.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijack the authentication (no CVSS) - [CVE-2015-5379](https://cve.now/CVE-2015-5379.md): Cross-site scripting (XSS) vulnerability in actions.hsp in the Ajax WebMail interface in AXIGEN Mail Server before 9.0 allows remote attacke (no CVSS) - [CVE-2015-5532](https://cve.now/CVE-2015-5532.md): Multiple cross-site scripting (XSS) vulnerabilities in the Paid Memberships Pro (PMPro) plugin before 1.8.4.3 for WordPress allow remote att (no CVSS) - [CVE-2015-5533](https://cve.now/CVE-2015-5533.md): SQL injection vulnerability in counter-options.php in the Count Per Day plugin before 3.4.1 for WordPress allows remote authenticated admini (no CVSS) - [CVE-2015-6839](https://cve.now/CVE-2015-6839.md): The parse function in MSA vot.Ar 3.1 does not check whether a candidate receives more than one vote, which allows physically proximate attac (no CVSS) - [CVE-2017-13772](https://cve.now/CVE-2017-13772.md): Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arb (no CVSS) - [CVE-2017-15808](https://cve.now/CVE-2017-15808.md): In phpMyFaq before 2.9.9, there is CSRF in admin/ajax.config.php. (no CVSS) - [CVE-2017-15809](https://cve.now/CVE-2017-15809.md): In phpMyFaq before 2.9.9, there is XSS in admin/tags.main.php via a crafted tag. (no CVSS) - [CVE-2017-15810](https://cve.now/CVE-2017-15810.md): The PopCash.Net Code Integration Tool plugin before 1.1 for WordPress has XSS via the tab parameter to wp-admin/admin.php. (no CVSS) - [CVE-2017-15811](https://cve.now/CVE-2017-15811.md): The Pootle Button plugin before 1.2.0 for WordPress has XSS via the assets\_url parameter in assets/dialog.php, exploitable via wp-admin/admi (no CVSS) - [CVE-2017-15812](https://cve.now/CVE-2017-15812.md): The Easy Appointments plugin before 1.12.0 for WordPress has XSS via a Settings values in the admin panel. (no CVSS) - [CVE-2016-10516](https://cve.now/CVE-2016-10516.md): Cross-site scripting (XSS) vulnerability in the render\_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (no CVSS, werkzeug) - [CVE-2010-2232](https://cve.now/CVE-2010-2232.md): In Apache Derby 10.1.2.1, 10.2.2.0, 10.3.1.4, and 10.4.1.3, Export processing may allow an attacker to overwrite an existing file. (no CVSS, Apache Software Foundation Apache Derby · org.apache.derby:…) - [CVE-2017-14327](https://cve.now/CVE-2017-14327.md): Extreme EXOS 16.x, 21.x, and 22.x allows administrators to read arbitrary files. (no CVSS) - [CVE-2017-14328](https://cve.now/CVE-2017-14328.md): Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to trigger a buffer overflow leading to a reboot. (no CVSS) - [CVE-2017-14329](https://cve.now/CVE-2017-14329.md): Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving an exsh debug shell. (no CVSS) - [CVE-2017-14330](https://cve.now/CVE-2017-14330.md): Extreme EXOS 16.x, 21.x, and 22.x allows administrators to obtain a root shell via vectors involving a privileged process. (no CVSS) - [CVE-2017-14331](https://cve.now/CVE-2017-14331.md): Extreme EXOS 16.x, 21.x, and 22.x allows administrators to bypass the "exsh restricted shell" protection mechanism and obtain an interactive (no CVSS) - [CVE-2017-14332](https://cve.now/CVE-2017-14332.md): Extreme EXOS 15.7, 16.x, 21.x, and 22.x allows remote attackers to hijack sessions by determining SessionID values. (no CVSS) - [CVE-2017-15377](https://cve.now/CVE-2017-15377.md): In Suricata before 4.x, it was possible to trigger lots of redundant checks on the content of crafted network traffic with a certain signatu (no CVSS) - [CVE-2017-15378](https://cve.now/CVE-2017-15378.md): SQL Injection exists in the E-Sic 1.0 password reset parameter (aka the cpfcnpj parameter to the /reset URI). (no CVSS) - [CVE-2017-15379](https://cve.now/CVE-2017-15379.md): An authentication bypass exists in the E-Sic 1.0 /index (aka login) URI via '=''or' values for the username and password. (no CVSS) - [CVE-2017-15380](https://cve.now/CVE-2017-15380.md): XSS exists in the E-Sic 1.0 /cadastro/index.php URI (aka the requester's registration area) via the nome parameter. (no CVSS) - [CVE-2017-15381](https://cve.now/CVE-2017-15381.md): SQL Injection exists in E-Sic 1.0 via the f parameter to esiclivre/restrito/inc/buscacep.php (aka the zip code search script). (no CVSS) - [CVE-2017-15567](https://cve.now/CVE-2017-15567.md): The certificate import component in IDEMIA (formerly Morpho) MorphoSmart 1300 Series (aka MSO 1300 Series) devices allows local users to obt (no CVSS) - [CVE-2017-15580](https://cve.now/CVE-2017-15580.md): osTicket 1.10.1 provides a functionality to upload 'html' files with associated formats. (no CVSS) - [CVE-2017-15687](https://cve.now/CVE-2017-15687.md): DOM Based Cross Site Scripting (XSS) exists in Logitech Media Server 7.7.1, 7.7.2, 7.7.3, 7.7.5, 7.7.6, 7.9.0, and 7.9.1 via a crafted URI. (no CVSS) - [CVE-2017-15805](https://cve.now/CVE-2017-15805.md): Cisco Small Business SA520 and SA540 devices with firmware 2.1.71 and 2.2.0.7 allow ../ directory traversal in scgi-bin/platform.cgi via the (no CVSS) - [CVE-2017-12796](https://cve.now/CVE-2017-12796.md): The Reporting Compatibility Add On before 2.0.4 for OpenMRS, as distributed in OpenMRS Reference Application before 2.6.1, does not authenti (no CVSS) - [CVE-2017-7072](https://cve.now/CVE-2017-7072.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7074](https://cve.now/CVE-2017-7074.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7076](https://cve.now/CVE-2017-7076.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7077](https://cve.now/CVE-2017-7077.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7078](https://cve.now/CVE-2017-7078.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7079](https://cve.now/CVE-2017-7079.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7080](https://cve.now/CVE-2017-7080.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7081](https://cve.now/CVE-2017-7081.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7082](https://cve.now/CVE-2017-7082.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7083](https://cve.now/CVE-2017-7083.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7084](https://cve.now/CVE-2017-7084.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7085](https://cve.now/CVE-2017-7085.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7086](https://cve.now/CVE-2017-7086.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7087](https://cve.now/CVE-2017-7087.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7088](https://cve.now/CVE-2017-7088.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7089](https://cve.now/CVE-2017-7089.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7090](https://cve.now/CVE-2017-7090.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7091](https://cve.now/CVE-2017-7091.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7092](https://cve.now/CVE-2017-7092.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7093](https://cve.now/CVE-2017-7093.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7094](https://cve.now/CVE-2017-7094.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7095](https://cve.now/CVE-2017-7095.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7096](https://cve.now/CVE-2017-7096.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7097](https://cve.now/CVE-2017-7097.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7098](https://cve.now/CVE-2017-7098.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7099](https://cve.now/CVE-2017-7099.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7100](https://cve.now/CVE-2017-7100.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7102](https://cve.now/CVE-2017-7102.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7103](https://cve.now/CVE-2017-7103.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7104](https://cve.now/CVE-2017-7104.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7105](https://cve.now/CVE-2017-7105.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7106](https://cve.now/CVE-2017-7106.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7107](https://cve.now/CVE-2017-7107.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7108](https://cve.now/CVE-2017-7108.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7109](https://cve.now/CVE-2017-7109.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7110](https://cve.now/CVE-2017-7110.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7111](https://cve.now/CVE-2017-7111.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7112](https://cve.now/CVE-2017-7112.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7114](https://cve.now/CVE-2017-7114.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7115](https://cve.now/CVE-2017-7115.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7116](https://cve.now/CVE-2017-7116.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7117](https://cve.now/CVE-2017-7117.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7118](https://cve.now/CVE-2017-7118.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7119](https://cve.now/CVE-2017-7119.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7120](https://cve.now/CVE-2017-7120.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7121](https://cve.now/CVE-2017-7121.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7122](https://cve.now/CVE-2017-7122.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7123](https://cve.now/CVE-2017-7123.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7124](https://cve.now/CVE-2017-7124.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7125](https://cve.now/CVE-2017-7125.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7126](https://cve.now/CVE-2017-7126.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7127](https://cve.now/CVE-2017-7127.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7128](https://cve.now/CVE-2017-7128.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7129](https://cve.now/CVE-2017-7129.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7130](https://cve.now/CVE-2017-7130.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7131](https://cve.now/CVE-2017-7131.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7133](https://cve.now/CVE-2017-7133.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7134](https://cve.now/CVE-2017-7134.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7135](https://cve.now/CVE-2017-7135.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7136](https://cve.now/CVE-2017-7136.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7137](https://cve.now/CVE-2017-7137.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7138](https://cve.now/CVE-2017-7138.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7139](https://cve.now/CVE-2017-7139.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7140](https://cve.now/CVE-2017-7140.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7141](https://cve.now/CVE-2017-7141.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7142](https://cve.now/CVE-2017-7142.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7143](https://cve.now/CVE-2017-7143.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7144](https://cve.now/CVE-2017-7144.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7145](https://cve.now/CVE-2017-7145.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7146](https://cve.now/CVE-2017-7146.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7147](https://cve.now/CVE-2017-7147.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7148](https://cve.now/CVE-2017-7148.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7149](https://cve.now/CVE-2017-7149.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-7150](https://cve.now/CVE-2017-7150.md): An issue was discovered in certain Apple products. (no CVSS) - [CVE-2017-9946](https://cve.now/CVE-2017-9946.md): A vulnerability has been identified in Siemens APOGEE PXC and TALON TC BACnet Automation Controllers in all versions \