CVEs published October 27, 2017
102 CVEs were published on October 27, 2017: 0 critical, 3 high. 1 is now in CISA KEV.
- Published
- 102
- Critical
- 0
- High
- 3
- Medium
- 0
- Low
- 0
- Unrated
- 99
- Now in CISA KEV
- 1
- Fix available
- 3
Most affected products
- Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…
- 8
- Google Chrome prior to 59.0.3071.86 for Linux, Windows and…
- 6
- Google Chrome prior to 58.0.3029.81 for Linux, Windows and…
- 5
- Google Chrome prior to 60.0.3112.78 for Linux, Windows and…
- 5
- Google Chrome prior to 61.0.3163.79 for Mac, Windows and Li…
- 5
- F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- 4
- Google Chrome prior to 58.0.3029.81 for Mac, Windows and Li…
- 4
- Google Chrome prior to 59.0.3071.86 for Mac, Windows and Li…
- 4
- Google Chrome prior to 57.0.2987.133 for Linux, Windows and…
- 3
- F5 Networks BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller…
- 2
High 3
- CVE-2017-13089GNU Wget: stack overflow in HTTP protocol handlingGNU Project Wget
- CVE-2017-13090GNU Wget: heap overflow in HTTP protocol handlingGNU Project Wget
- CVE-2017-5070Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attaGoogle Chrome prior to 59.0.3071.86 for Linux, Windows and…
Medium, low and unrated 99
- CVE-2017-15938dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, miscalculates DW_FORM_ref_addr die r
- CVE-2017-15939dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_li
- CVE-2017-15945The installation scripts in the Gentoo dev-db/mysql, dev-db/mariadb, dev-db/percona-server, dev-db/mysql-cluster, and dev-db/mariadb-galera
- CVE-2017-15581In the "Diary with lock" (aka WriteDiary) application 4.72 for Android, neither HTTPS nor other encryption is used for transmitting data, de
- CVE-2017-15582In net.MCrypt in the "Diary with lock" (aka WriteDiary) application 4.72 for Android, hardcoded SecretKey and iv variables are used for the
- CVE-2017-15934Artica Pandora FMS version 7.0 is vulnerable to stored Cross-Site Scripting in the map name parameter.
- CVE-2017-15935Artica Pandora FMS version 7.0 is vulnerable to remote PHP code execution through the manager files function.
- CVE-2017-15936In Artica Pandora FMS version 7.0, an Attacker with write Permission can create an agent with an XSS Payload; when a user enters the agent d
- CVE-2017-15937Artica Pandora FMS version 7.0 leaks a full installation pathname via GET data when intercepting the main page's graph requisition.
- CVE-2014-3579XML external entity (XXE) vulnerability in Apache ActiveMQ Apollo 1.x before 1.7.1 allows remote consumers to have unspecified impact via veorg.apache.activemq:apollo-project
- CVE-2014-3600XML external entity (XXE) vulnerability in Apache ActiveMQ 5.x before 5.10.1 allows remote consumers to have unspecified impact via vectors org.apache.activemq:activemq-client · org.apache.activemq:a…
- CVE-2015-1835Apache Cordova Android before 3.7.2 and 4.x before 4.0.2, when an application does not set explicit values in config.xml, allows remote atta
- CVE-2017-15933SQL injection vulnerability vulnerability in the EyesOfNetwork web interface (aka eonweb) 5.1-0 allows remote authenticated administrators t
- CVE-2016-5002XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackorg.apache.xmlrpc:xmlrpc
- CVE-2016-5003The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a craftedorg.apache.xmlrpc:xmlrpc
- CVE-2017-15930In ReadOneJNGImage in coders/png.c in GraphicsMagick 1.3.26, a Null Pointer Dereference occurs while transferring JPEG scanlines, related to
- CVE-2017-15931In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verneed() in li
- CVE-2017-15932In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verdef() in lib
- CVE-2017-15928In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj.ox
- CVE-2017-15924In manager.c in ss-manager in shadowsocks-libev 3.1.0, improper parsing allows command injection via shell metacharacters in a JSON configur
- CVE-2017-0303In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2 and 11F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2017-6157In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 12.0.0 to 12.1.1, 11.6.0 to 11.F5 Networks BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller…
- CVE-2017-6159F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1 arF5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2017-6160In F5 BIG-IP AAM and PEM software version 12.0.0 to 12.1.1, 11.6.0 to 11.6.1, 11.4.1 to 11.5.4, a remote attacker may create maliciously craF5 Networks BIG-IP AAM, PEM
- CVE-2017-6161In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator software version 12.0.0 - 12.1F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2017-6162In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, Websafe software version 12.0.0 to 12.1.2, 11F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2017-6163In F5 BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller, PEM, PSM software version 12.0.0 to 12.1.2, 11.6.0 to 11.6.1, 11.4.0 to 11.5.4, when F5 Networks BIG-IP LTM, AAM, AFM, APM, ASM, Link Controller…
- CVE-2017-14182A Denial of Service (DoS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 allows an authenticated user to cause the web GUI to be temporariFortinet FortiOS
- CVE-2017-7733A Cross-Site-Scripting (XSS) vulnerability in Fortinet FortiOS 5.4.0 to 5.4.5 and 5.6.0 allows a remote unauthenticated attacker to execute Fortinet FortiOS
- CVE-2017-5052An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.13Google Chrome prior to 57.0.2987.133 for Mac, Windows and L…
- CVE-2017-5053An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a reGoogle Chrome prior to 57.0.2987.133 for Linux, Windows and…
- CVE-2017-5054An out-of-bounds read in V8 in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a reGoogle Chrome prior to 57.0.2987.133 for Linux, Windows and…
- CVE-2017-5055A use after free in printing in Google Chrome prior to 57.0.2987.133 for Linux and Windows allowed a remote attacker to perform an out of boGoogle Chrome prior to 57.0.2987.133 for Linux and Windows
- CVE-2017-5056A use after free in Blink in Google Chrome prior to 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remoGoogle Chrome prior to 57.0.2987.133 for Linux, Windows and…
- CVE-2017-5057Type confusion in PDFium in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a remote Google Chrome prior to 58.0.3029.81 for Mac, Windows and Li…
- CVE-2017-5058A use after free in PrintPreview in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially perform out of Google Chrome prior to 58.0.3029.81 for Windows
- CVE-2017-5059Type confusion in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remote aGoogle Chrome prior to 58.0.3029.81 for Linux, Windows and…
- CVE-2017-5060Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android,Google Chrome prior to 58.0.3029.81 for Mac, Windows and Li…
- CVE-2017-5061A race condition in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker to spoof the conGoogle Chrome prior to 58.0.3029.81 for Linux, Windows and…
- CVE-2017-5062A use after free in Chrome Apps in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and Linux, and 58.0.3029.83 for Android, allowed a Google Chrome prior to 58.0.3029.81 for Mac, Windows and Li…
- CVE-2017-5063A numeric overflow in Skia in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 for Android, allowed a remotGoogle Chrome prior to 58.0.3029.81 for Linux, Windows and…
- CVE-2017-5064Incorrect handling of DOM changes in Blink in Google Chrome prior to 58.0.3029.81 for Windows allowed a remote attacker to potentially exploGoogle Chrome prior to 58.0.3029.81 for Windows
- CVE-2017-5065Lack of an appropriate action on page navigation in Blink in Google Chrome prior to 58.0.3029.81 for Windows and Mac allowed a remote attackGoogle Chrome prior to 58.0.3029.81 for Windows and Mac
- CVE-2017-5066Insufficient consistency checks in signature handling in the networking stack in Google Chrome prior to 58.0.3029.81 for Mac, Windows, and LGoogle Chrome prior to 58.0.3029.81 for Mac, Windows and Li…
- CVE-2017-5067An insufficient watchdog timer in navigation in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac allowed a remote attacker toGoogle Chrome prior to 58.0.3029.81 for Linux, Windows and…
- CVE-2017-5068Incorrect handling of picture ID in WebRTC in Google Chrome prior to 58.0.3029.96 for Mac, Windows, and Linux allowed a remote attacker to tGoogle Chrome prior to 58.0.3029.96 for Mac, Windows and Li…
- CVE-2017-5069Incorrect MIME type of XSS-Protection reports in Blink in Google Chrome prior to 58.0.3029.81 for Linux, Windows, and Mac, and 58.0.3029.83 Google Chrome prior to 58.0.3029.81 for Linux, Windows and…
- CVE-2017-5071Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows and Mac, and 59.0.3071.92 for AndGoogle Chrome prior to 59.0.3071.86 for Linux, Windows and…
- CVE-2017-5072Inappropriate implementation in Omnibox in Google Chrome prior to 59.0.3071.92 for Android allowed a remote attacker to perform domain spoofGoogle Chrome prior to 59.0.3071.92 for Android
- CVE-2017-5073Use after free in print preview in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, aGoogle Chrome prior to 59.0.3071.86 for Linux, Windows and…
- CVE-2017-5074A use after free in Chrome Apps in Google Chrome prior to 59.0.3071.86 for Windows allowed a remote attacker to perform an out of bounds memGoogle Chrome prior to 59.0.3071.86 for Windows
- CVE-2017-5075Inappropriate implementation in CSP reporting in Blink in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 Google Chrome prior to 59.0.3071.86 for Linux, Windows and…
- CVE-2017-5076Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android,Google Chrome prior to 59.0.3071.86 for Mac, Windows and Li…
- CVE-2017-5077Insufficient validation of untrusted input in Skia in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Google Chrome prior to 59.0.3071.86 for Linux, Windows and…
- CVE-2017-5078Insufficient validation of untrusted input in Blink's mailto: handling in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac alGoogle Chrome prior to 59.0.3071.86 for Linux, Windows and…
- CVE-2017-5079Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, alloGoogle Chrome prior to 59.0.3071.86 for Mac, Windows and Li…
- CVE-2017-5080A use after free in credit card autofill in Google Chrome prior to 59.0.3071.86 for Linux and Windows allowed a remote attacker to perform aGoogle Chrome prior to 59.0.3071.86 for Linux and Windows
- CVE-2017-5081Lack of verification of an extension's locale folder in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 foGoogle Chrome prior to 59.0.3071.86 for Mac, Windows and Li…
- CVE-2017-5082Failure to take advantage of available mitigations in credit card autofill in Google Chrome prior to 59.0.3071.92 for Android allowed a locaGoogle Chrome prior to 59.0.3071.92 for Android
- CVE-2017-5083Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, alloGoogle Chrome prior to 59.0.3071.86 for Mac, Windows and Li…
- CVE-2017-5084Inappropriate implementation in image-burner in Google Chrome OS prior to 59.0.3071.92 allowed a local attacker to read local files via dbusGoogle Chrome prior to
- CVE-2017-5085Inappropriate implementation in Bookmarks in Google Chrome prior to 59 for iOS allowed a remote attacker who convinced the user to perform cGoogle Chrome prior to 59 for iOS
- CVE-2017-5086Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.86 for Windows and Mac allowed a remote attacker to perform dGoogle Chrome prior to 59.0.3071.86 for Windows and Mac
- CVE-2017-5087A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remoGoogle Chrome prior to 59.0.3071.104 for Mac, Windows and L…
- CVE-2017-5088Insufficient validation of untrusted input in V8 in Google Chrome prior to 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Google Chrome prior to 59.0.3071.104 for Mac, Windows and L…
- CVE-2017-5089Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.104 for Mac allowed a remote attacker to perform domain spoofGoogle Chrome prior to 59.0.3071.104 for Mac
- CVE-2017-5090Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 59.0.3071.115 for Mac allowed a remote attacker to perform domain spoofGoogle Chrome prior to 59.0.3071.115 for Mac
- CVE-2017-5091A use after free in IndexedDB in Google Chrome prior to 60.0.3112.78 for Linux, Android, Windows, and Mac allowed a remote attacker to perfoGoogle Chrome prior to 60.0.3112.78 for Linux, Android, Win…
- CVE-2017-5092Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to Google Chrome prior to 60.0.3112.78 for Windows
- CVE-2017-5093Inappropriate implementation in modal dialog handling in Blink in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android aGoogle Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…
- CVE-2017-5094Type confusion in extensions JavaScript bindings in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remotGoogle Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…
- CVE-2017-5095Stack overflow in PDFium in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to potentially exploitGoogle Chrome prior to 60.0.3112.78 for Linux, Windows and…
- CVE-2017-5096Insufficient policy enforcement during navigation between different schemes in Google Chrome prior to 60.0.3112.78 for Android allowed a remGoogle Chrome prior to 60.0.3112.78 for Android
- CVE-2017-5097Insufficient validation of untrusted input in Skia in Google Chrome prior to 60.0.3112.78 for Linux allowed a remote attacker to perform an Google Chrome prior to 60.0.3112.78 for Linux
- CVE-2017-5098A use after free in V8 in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to perform an oGoogle Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…
- CVE-2017-5099Insufficient validation of untrusted input in PPAPI Plugins in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to poteGoogle Chrome prior to 60.0.3112.78 for Mac
- CVE-2017-5100A use after free in Apps in Google Chrome prior to 60.0.3112.78 for Windows allowed a remote attacker to perform an out of bounds memory reaGoogle Chrome prior to 60.0.3112.78 for Windows
- CVE-2017-5101Inappropriate implementation in Omnibox in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to spooGoogle Chrome prior to 60.0.3112.78 for Linux, Windows and…
- CVE-2017-5102Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…
- CVE-2017-5103Use of an uninitialized value in Skia in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to obtainGoogle Chrome prior to 60.0.3112.78 for Linux, Windows and…
- CVE-2017-5104Inappropriate implementation in interstitials in Google Chrome prior to 60.0.3112.78 for Mac allowed a remote attacker to spoof the contentsGoogle Chrome prior to 60.0.3112.78 for Mac
- CVE-2017-5105Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attaGoogle Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…
- CVE-2017-5106Insufficient Policy Enforcement in Omnibox in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attaGoogle Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…
- CVE-2017-5107A timing attack in SVG rendering in Google Chrome prior to 60.0.3112.78 for Linux, Windows, and Mac allowed a remote attacker to extract pixGoogle Chrome prior to 60.0.3112.78 for Linux, Windows and…
- CVE-2017-5108Type confusion in PDFium in Google Chrome prior to 60.0.3112.78 for Mac, Windows, Linux, and Android allowed a remote attacker to potentiallGoogle Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…
- CVE-2017-5109Inappropriate implementation of unload handler handling in permission prompts in Google Chrome prior to 60.0.3112.78 for Linux, Windows, andGoogle Chrome prior to 60.0.3112.78 for Linux, Windows and…
- CVE-2017-5110Inappropriate implementation of the web payments API on blob: and data: schemes in Web Payments in Google Chrome prior to 60.0.3112.78 for MGoogle Chrome prior to 60.0.3112.78 for Mac, Windows, Linux…
- CVE-2017-5111A use after free in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac allowed a remote attacker to potentially exploGoogle Chrome prior to 61.0.3163.79 for Linux, Windows and…
- CVE-2017-5112Heap buffer overflow in WebGL in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to execute arbitrary code inside Google Chrome prior to 61.0.3163.79 for Windows
- CVE-2017-5113Math overflow in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attGoogle Chrome prior to 61.0.3163.79 for Mac, Windows and Li…
- CVE-2017-5114Inappropriate use of partition alloc in PDFium in Google Chrome prior to 61.0.3163.79 for Linux, Windows, and Mac, and 61.0.3163.81 for AndrGoogle Chrome prior to 61.0.3163.79 for Linux, Windows and…
- CVE-2017-5115Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption vGoogle Chrome prior to 61.0.3163.79 for Windows
- CVE-2017-5116Type confusion in V8 in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attaGoogle Chrome prior to 61.0.3163.79 for Mac, Windows and Li…
- CVE-2017-5117Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Linux and Windows allowed a remote attacker to obtain potenGoogle Chrome prior to 61.0.3163.79 for Linux and Windows
- CVE-2017-5118Blink in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, failed to correctly propagate CSP reGoogle Chrome prior to 61.0.3163.79 for Mac, Windows and Li…
- CVE-2017-5119Use of an uninitialized value in Skia in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, alloGoogle Chrome prior to 61.0.3163.79 for Mac, Windows and Li…
- CVE-2017-5120Inappropriate use of www mismatch redirects in browser navigation in Google Chrome prior to 61.0.3163.79 for Mac, Windows, and Linux, and 61Google Chrome prior to 61.0.3163.79 for Mac, Windows and Li…
- CVE-2017-5121Inappropriate use of JIT optimisation in V8 in Google Chrome prior to 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker toGoogle Chrome prior to 61.0.3163.100 for Linux, Windows and…
- CVE-2017-5122Inappropriate use of table size handling in V8 in Google Chrome prior to 61.0.3163.100 for Windows allowed a remote attacker to trigger out-Google Chrome prior to 61.0.3163.100 for Windows