CVEs published November 13, 2017
97 CVEs were published on November 13, 2017: 0 critical, 0 high.
- Published
- 97
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 97
- Now in CISA KEV
- 0
- Fix available
- 8
Most affected products
- IBM Security Access Manager
- 2
- Symantec Endpoint Encryption
- 2
- Apache Software Foundation Apache Hadoop · org.apache.hadoo…
- 1
- Apache Software Foundation Apache OpenOffice
- 1
- AutomationDirect CLICK Programming Software · Automation… +5
- 1
- Dahua Technologies NVR50XX, VR52XX, VR54XX, VR58XX
- 1
- Fortinet FortiOS
- 1
- geminabox
- 1
- getkirby/cms
- 1
- GrootFS release GrootFS release 0.3.x versions prior to
- 1
Medium, low and unrated 97
- CVE-2017-1221IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it easIBM BigFix Platform
- CVE-2017-1229IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure toIBM BigFix family
- CVE-2017-1453IBM Security Access Manager Appliance 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system.IBM Security Access Manager
- CVE-2017-1477IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data.IBM Security Access Manager
- CVE-2017-1710A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to perform a privilege escalatioIBM Storwize
- CVE-2016-8610A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processiOpenSSL
- CVE-2017-15525Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a denial of service (DoS) attack, which is a type of attack wherSymantec Endpoint Encryption
- CVE-2017-15526Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a null pointer de-reference issue, which can result in a NullPoiSymantec Endpoint Encryption
- CVE-2017-16805In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted E
- CVE-2017-16806The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal.
- CVE-2017-16807A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a getkirby/cms
- CVE-2017-16808tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe_print in print-aoe.c and lookup_emem in addrtoname.c.
- CVE-2017-14020In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9-AutomationDirect CLICK Programming Software · Automation… +5
- CVE-2017-14024A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InToucSchneider Electric InduSoft Web Studio and InTouch Machine…
- CVE-2017-16804In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, w
- CVE-2017-0889Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter clasthoughtbot paperclip ruby gem · paperclip
- CVE-2017-0904The private_address_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-depenjtdowney private_address_check ruby gem · private_address_c…
- CVE-2017-0905The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerablrecurly ruby gem · recurly
- CVE-2017-0906The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vurecurly python module · recurly
- CVE-2017-0907The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Requesrecurly-api-client .NET library · recurly-api-client
- CVE-2017-14388Cloud Foundry Foundation GrootFS release 0.3.x versions prior to 0.30.0 do not validate DiffIDs, allowing specially crafted images to poisonGrootFS release GrootFS release 0.3.x versions prior to
- CVE-2017-16803In Libav through 11.11 and 12.x through 12.1, the smacker_decode_tree function in libavcodec/smacker.c does not properly restrict tree recur
- CVE-2017-16802In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name tha
- CVE-2017-3767A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad pLenovo Group Realtek Audio Driver
- CVE-2017-9314Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH_NVR5xxx_Eng_P_V2.616.0000.Dahua Technologies NVR50XX, VR52XX, VR54XX, VR58XX
- CVE-2016-6803An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for WindApache Software Foundation Apache OpenOffice
- CVE-2017-10871Buffer overflow in NTT DOCOMO Wi-Fi STATION L-02F Software version L02F-MDM9625-V10h-JUN-23-2017-DCM-JP and earlier allows an attacker to exNTT DOCOMO Wi-Fi STATION L-02F Software
- CVE-2017-10875I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vectI-O DATA DEVICE LAN DISK Connect
- CVE-2017-10885Untrusted search path vulnerability in HYPER SBI Ver.SBI SECURITIES Co. HYPER SBI
- CVE-2017-3166In Apache Hadoop versions 2.6.1 to 2.6.5, 2.7.0 to 2.7.3, and 3.0.0-alpha1, if a file in an encryption zone with access permissions that makApache Software Foundation Apache Hadoop · org.apache.hadoo…
- CVE-2017-7739A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5Fortinet FortiOS
- CVE-2017-11169Privilege Escalation on iBall iB-WRA300N3GT iB-WRA300N3GT_1.1.1 devices allows remote authenticated users to obtain root privileges by lever
- CVE-2017-14711The Kickbase GmbH "Kickbase Bundesliga Manager" app before 2.2.1 -- aka kickbase-bundesliga-manager/id678241305 -- for iOS is vulnerable to
- CVE-2017-16792Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web scriptgeminabox
- CVE-2017-16801Cross-site scripting (XSS) vulnerability in Octopus Deploy 3.7.0-3.17.13 (fixed in 3.17.14) allows remote authenticated users to inject arbi
- CVE-2017-8806The Debian pg_ctlcluster, pg_createcluster, and pg_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181PostgreSQL-related scripts that are specific to Debian and…
- CVE-2017-13783An issue was discovered in certain Apple products.
- CVE-2017-13784An issue was discovered in certain Apple products.
- CVE-2017-13785An issue was discovered in certain Apple products.
- CVE-2017-13786An issue was discovered in certain Apple products.
- CVE-2017-13788An issue was discovered in certain Apple products.
- CVE-2017-13789An issue was discovered in certain Apple products.
- CVE-2017-13790An issue was discovered in certain Apple products.
- CVE-2017-13791An issue was discovered in certain Apple products.
- CVE-2017-13792An issue was discovered in certain Apple products.
- CVE-2017-13793An issue was discovered in certain Apple products.
- CVE-2017-13794An issue was discovered in certain Apple products.
- CVE-2017-13795An issue was discovered in certain Apple products.
- CVE-2017-13796An issue was discovered in certain Apple products.
- CVE-2017-13797An issue was discovered in certain Apple products.
- CVE-2017-13798An issue was discovered in certain Apple products.
- CVE-2017-13799An issue was discovered in certain Apple products.
- CVE-2017-13800An issue was discovered in certain Apple products.
- CVE-2017-13801An issue was discovered in certain Apple products.
- CVE-2017-13802An issue was discovered in certain Apple products.
- CVE-2017-13803An issue was discovered in certain Apple products.
- CVE-2017-13804An issue was discovered in certain Apple products.
- CVE-2017-13805An issue was discovered in certain Apple products.
- CVE-2017-13807An issue was discovered in certain Apple products.
- CVE-2017-13808An issue was discovered in certain Apple products.
- CVE-2017-13809An issue was discovered in certain Apple products.
- CVE-2017-13810An issue was discovered in certain Apple products.
- CVE-2017-13811An issue was discovered in certain Apple products.
- CVE-2017-13812An issue was discovered in certain Apple products.
- CVE-2017-13813An issue was discovered in certain Apple products.
- CVE-2017-13814An issue was discovered in certain Apple products.
- CVE-2017-13815An issue was discovered in certain Apple products.
- CVE-2017-13816An issue was discovered in certain Apple products.
- CVE-2017-13817An out-of-bounds read issue was discovered in certain Apple products.
- CVE-2017-13818An issue was discovered in certain Apple products.
- CVE-2017-13819An issue was discovered in certain Apple products.
- CVE-2017-13820An issue was discovered in certain Apple products.
- CVE-2017-13821An issue was discovered in certain Apple products.
- CVE-2017-13822An issue was discovered in certain Apple products.
- CVE-2017-13823An issue was discovered in certain Apple products.
- CVE-2017-13824An issue was discovered in certain Apple products.
- CVE-2017-13825An issue was discovered in certain Apple products.
- CVE-2017-13828An issue was discovered in certain Apple products.
- CVE-2017-13829An issue was discovered in certain Apple products.
- CVE-2017-13830An issue was discovered in certain Apple products.
- CVE-2017-13831An issue was discovered in certain Apple products.
- CVE-2017-13832An issue was discovered in certain Apple products.
- CVE-2017-13833An issue was discovered in certain Apple products.
- CVE-2017-13834An issue was discovered in certain Apple products.
- CVE-2017-13836An issue was discovered in certain Apple products.
- CVE-2017-13838An issue was discovered in certain Apple products.
- CVE-2017-13840An issue was discovered in certain Apple products.
- CVE-2017-13841An issue was discovered in certain Apple products.
- CVE-2017-13842An issue was discovered in certain Apple products.
- CVE-2017-13843An issue was discovered in certain Apple products.
- CVE-2017-13844An issue was discovered in certain Apple products.
- CVE-2017-13846An issue was discovered in certain Apple products.
- CVE-2017-13849An issue was discovered in certain Apple products.
- CVE-2017-13852An issue was discovered in certain Apple products.
- CVE-2017-7113An issue was discovered in certain Apple products.
- CVE-2017-7132An issue was discovered in certain Apple products.
- CVE-2017-13782An issue was discovered in certain Apple products.