# CVEs published 2017-11-03

33 CVEs were published on November 3, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-1000131](https://cve.now/CVE-2017-1000131.md): Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to users staying logged in to their Mahara acco (no CVSS)
- [CVE-2017-1000132](https://cve.now/CVE-2017-1000132.md): Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .swf fi (no CVSS)
- [CVE-2017-1000133](https://cve.now/CVE-2017-1000133.md): Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to a user - in some circumstances causing anoth (no CVSS)
- [CVE-2017-1000134](https://cve.now/CVE-2017-1000134.md): Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable because group members can lose a (no CVSS)
- [CVE-2017-1000135](https://cve.now/CVE-2017-1000135.md): Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable as logged-in users can stay logg (no CVSS)
- [CVE-2017-1000136](https://cve.now/CVE-2017-1000136.md): Mahara 1.8 before 1.8.6 and 1.9 before 1.9.4 and 1.10 before 1.10.1 and 15.04 before 15.04.0 are vulnerable to old sessions not being invali (no CVSS)
- [CVE-2017-1000137](https://cve.now/CVE-2017-1000137.md): Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when adding a text block to a page via th (no CVSS)
- [CVE-2017-1000138](https://cve.now/CVE-2017-1000138.md): Mahara 1.10 before 1.10.0 and 15.04 before 15.04.0 are vulnerable to possible cross site scripting when dragging/dropping files into a colle (no CVSS)
- [CVE-2017-1000139](https://cve.now/CVE-2017-1000139.md): Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-side request forgery a (no CVSS)
- [CVE-2017-1000140](https://cve.now/CVE-2017-1000140.md): Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .xml fi (no CVSS)
- [CVE-2017-1000142](https://cve.now/CVE-2017-1000142.md): Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users being able to delete th (no CVSS)
- [CVE-2017-1000143](https://cve.now/CVE-2017-1000143.md): Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to users receiving watchlist not (no CVSS)
- [CVE-2017-1000144](https://cve.now/CVE-2017-1000144.md): Mahara 1.9 before 1.9.6 and 1.10 before 1.10.4 and 15.04 before 15.04.1 are vulnerable to a site admin or institution admin being able to pl (no CVSS)
- [CVE-2017-1000145](https://cve.now/CVE-2017-1000145.md): Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to anonymous comments being able to be placed on arte (no CVSS)
- [CVE-2017-1000146](https://cve.now/CVE-2017-1000146.md): Mahara 1.9 before 1.9.7 and 1.10 before 1.10.5 and 15.04 before 15.04.2 are vulnerable to the arbitrary execution of Javascript in the brows (no CVSS)
- [CVE-2017-1000147](https://cve.now/CVE-2017-1000147.md): Mahara 1.9 before 1.9.8 and 1.10 before 1.10.6 and 15.04 before 15.04.3 are vulnerable to perform a cross-site request forgery (CSRF) attack (no CVSS)
- [CVE-2017-1000148](https://cve.now/CVE-2017-1000148.md): Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to PHP code execution as Mahara would pass port (no CVSS)
- [CVE-2017-1000149](https://cve.now/CVE-2017-1000149.md): Mahara 1.10 before 1.10.9 and 15.04 before 15.04.6 and 15.10 before 15.10.2 are vulnerable to XSS due to window.opener (target="\_blank" and (no CVSS)
- [CVE-2017-1000150](https://cve.now/CVE-2017-1000150.md): Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 are vulnerable to prevent session IDs from being regenerated on login or logout. (no CVSS)
- [CVE-2017-1000151](https://cve.now/CVE-2017-1000151.md): Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to passwords or other sensitive information bei (no CVSS)
- [CVE-2017-1000152](https://cve.now/CVE-2017-1000152.md): Mahara 15.04 before 15.04.7 and 15.10 before 15.10.3 running PHP 5.3 are vulnerable to one user being logged in as another user on a separat (no CVSS)
- [CVE-2017-1000153](https://cve.now/CVE-2017-1000153.md): Mahara 15.04 before 15.04.10 and 15.10 before 15.10.6 and 16.04 before 16.04.4 are vulnerable to incorrect access control after the password (no CVSS)
- [CVE-2017-1000154](https://cve.now/CVE-2017-1000154.md): Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to some authentication methods, which do not us (no CVSS)
- [CVE-2017-1000155](https://cve.now/CVE-2017-1000155.md): Mahara 15.04 before 15.04.8 and 15.10 before 15.10.4 and 16.04 before 16.04.2 are vulnerable to profile pictures being accessed without any (no CVSS)
- [CVE-2017-1000156](https://cve.now/CVE-2017-1000156.md): Mahara 15.04 before 15.04.9 and 15.10 before 15.10.5 and 16.04 before 16.04.3 are vulnerable to a group's configuration page being editable (no CVSS)
- [CVE-2017-1000157](https://cve.now/CVE-2017-1000157.md): Mahara 15.04 before 15.04.13 and 16.04 before 16.04.7 and 16.10 before 16.10.4 and 17.04 before 17.04.2 are vulnerable to recording plain te (no CVSS)
- [CVE-2017-1000171](https://cve.now/CVE-2017-1000171.md): Mahara Mobile before 1.2.1 is vulnerable to passwords being sent to the Mahara access log in plain text. (no CVSS)
- [CVE-2017-14359](https://cve.now/CVE-2017-14359.md): MFSBGN03788 rev.1 - HPE Performance Center, Remote Cross-Site Scripting (XSS) (no CVSS, Micro Focus HPE Performance Center)
- [CVE-2017-16522](https://cve.now/CVE-2017-16522.md): MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES\_113WJY0b16 devices allow remote authenticated users to obtain root access by s (no CVSS)
- [CVE-2017-16523](https://cve.now/CVE-2017-16523.md): MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES\_113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is (no CVSS)
- [CVE-2017-16513](https://cve.now/CVE-2017-16513.md): Ipswitch WS\_FTP Professional before 12.6.0.3 has buffer overflows in the local search field and the backup locations field, aka WSCLT-1729. (no CVSS)
- [CVE-2017-16237](https://cve.now/CVE-2017-16237.md): In Vir.IT eXplorer Anti-Virus before 8.5.42, the driver file (VIAGLT64.SYS) contains an Arbitrary Write vulnerability because of not validat (no CVSS)
- [CVE-2017-16516](https://cve.now/CVE-2017-16516.md): In the yajl-ruby gem 1.3.0 for Ruby, when a crafted JSON file is supplied to Yajl::Parser.new.parse, the whole ruby process crashes with a S (no CVSS, yajl-ruby)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-11-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.