CVEs published November 7, 2017
44 CVEs were published on November 7, 2017: 17 critical, 11 high.
- Published
- 44
- Critical
- 17
- High
- 11
- Medium
- 2
- Low
- 0
- Unrated
- 14
- Now in CISA KEV
- 0
- Fix available
- 0
Most affected products
- Circle Media Circle
- 22
- Cesanta Mongoose
- 8
- Synology CardDAV Server
- 1
Critical 17
- CVE-2017-12085An exploitable routing vulnerability exists in the Circle with Disney cloud infrastructure.Circle Media Circle
- CVE-2017-2865An exploitable vulnerability exists in the firmware update functionality of Circle with Disney.Circle Media Circle
- CVE-2017-2866An exploitable vulnerability exists in the /api/CONFIG/backup functionality of Circle with Disney.Circle Media Circle
- CVE-2017-2881An exploitable vulnerability exists in the torlist update functionality of Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-2882An exploitable vulnerability exists in the servers update functionality of Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-2883An exploitable vulnerability exists in the database update functionality of Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-2890An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-2891An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8.Cesanta Mongoose
- CVE-2017-2892An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8.Cesanta Mongoose
- CVE-2017-2894An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8.Cesanta Mongoose
- CVE-2017-2898An exploitable vulnerability exists in the signature verification of the firmware update functionality of Circle with Disney.Circle Media Circle
- CVE-2017-2911An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-2914An exploitable authentication bypass vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-2915An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-2916An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-2917An exploitable vulnerability exists in the notifications functionality of Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-2922An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8.Cesanta Mongoose
High 11
- CVE-2017-12084A backdoor vulnerability exists in remote control functionality of Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-12094An exploitable vulnerability exists in the WiFi Channel parsing of Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-2864An exploitable vulnerability exists in the generation of authentication token functionality of Circle with Disney.Circle Media Circle
- CVE-2017-2884An exploitable vulnerability exists in the user photo update functionality of Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-2889An exploitable Denial of Service vulnerability exists in the API daemon of Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-2893An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8.Cesanta Mongoose
- CVE-2017-2895An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8.Cesanta Mongoose
- CVE-2017-2909An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library.Cesanta Mongoose
- CVE-2017-2912An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-2913An exploitable vulnerability exists in the filtering functionality of Circle with Disney.Circle Media Circle
- CVE-2017-2921An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8.Cesanta Mongoose
Medium, low and unrated 16
- CVE-2017-16643The parse_hid_report_descriptor function in drivers/input/tablet/gtco.c in the Linux kernel before 4.13.11 allows local users to cause a den
- CVE-2017-16644The hdpvr_probe function in drivers/media/usb/hdpvr/hdpvr-core.c in the Linux kernel through 4.13.11 allows local users to cause a denial of
- CVE-2017-16645The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a de
- CVE-2017-16646drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and sys
- CVE-2017-16647drivers/net/usb/asix_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference
- CVE-2017-16648The dvb_frontend_free function in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel through 4.13.11 allows local users to cause a de
- CVE-2017-16649The usbnet_generic_cdc_bind function in drivers/net/usb/cdc_ether.c in the Linux kernel through 4.13.11 allows local users to cause a denial
- CVE-2017-16650The qmi_wwan_bind function in drivers/net/usb/qmi_wwan.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service
- CVE-2017-16561/view/friend_profile.php in Ingenious School Management System 2.3.0 is vulnerable to Boolean-based and Time-based SQL injection in the 'fri
- CVE-2008-7319The Net::Ping::External extension through 0.15 for Perl does not properly sanitize arguments (e.g., invalid hostnames) containing shell meta
- CVE-2016-0872A Plaintext Storage of a Password issue was discovered in Kabona AB WebDatorCentral (WDC) versions prior to Version 3.4.0.
- CVE-2017-16642In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' a
- CVE-2017-16641lib/rrd.php in Cacti 1.1.27 allows remote authenticated administrators to execute arbitrary OS commands via the path_rrdtool parameter in an
- CVE-2017-12083An exploitable information disclosure vulnerability exists in the apid daemon of the Circle with Disney running firmware 2.0.1.Circle Media Circle
- CVE-2017-12096An exploitable vulnerability exists in the WiFi management of Circle with Disney.Circle Media Circle
- CVE-2017-15887An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allowSynology CardDAV Server