# CVEs published 2017-11-13

97 CVEs were published on November 13, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-1221](https://cve.now/CVE-2017-1221.md): IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) does not require that users should have strong passwords by default, which makes it eas (no CVSS, IBM BigFix Platform)
- [CVE-2017-1229](https://cve.now/CVE-2017-1229.md): IBM Tivoli Endpoint Manager (IBM BigFix 9.2 and 9.5) could allow a remote attacker to obtain sensitive information, caused by the failure to (no CVSS, IBM BigFix family)
- [CVE-2017-1453](https://cve.now/CVE-2017-1453.md): IBM Security Access Manager Appliance 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. (no CVSS, IBM Security Access Manager)
- [CVE-2017-1477](https://cve.now/CVE-2017-1477.md): IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. (no CVSS, IBM Security Access Manager)
- [CVE-2017-1710](https://cve.now/CVE-2017-1710.md): A vulnerability in the Service Assistant GUI in IBM Storwize V7000 (2076) 8.1 could allow a remote attacker to perform a privilege escalatio (no CVSS, IBM Storwize)
- [CVE-2016-8610](https://cve.now/CVE-2016-8610.md): A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processi (no CVSS, OpenSSL)
- [CVE-2017-15525](https://cve.now/CVE-2017-15525.md): Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a denial of service (DoS) attack, which is a type of attack wher (no CVSS, Symantec Endpoint Encryption)
- [CVE-2017-15526](https://cve.now/CVE-2017-15526.md): Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a null pointer de-reference issue, which can result in a NullPoi (no CVSS, Symantec Endpoint Encryption)
- [CVE-2017-16805](https://cve.now/CVE-2017-16805.md): In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted E (no CVSS)
- [CVE-2017-16806](https://cve.now/CVE-2017-16806.md): The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal. (no CVSS)
- [CVE-2017-16807](https://cve.now/CVE-2017-16807.md): A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exists when displaying a (no CVSS, getkirby/cms)
- [CVE-2017-16808](https://cve.now/CVE-2017-16808.md): tcpdump before 4.9.3 has a heap-based buffer over-read related to aoe\_print in print-aoe.c and lookup\_emem in addrtoname.c. (no CVSS)
- [CVE-2017-14020](https://cve.now/CVE-2017-14020.md): In AutomationDirect CLICK Programming Software (Part Number C0-PGMSW) Versions 2.10 and prior; C-More Programming Software (Part Number EA9- (no CVSS, AutomationDirect CLICK Programming Software · Automation… +5)
- [CVE-2017-14024](https://cve.now/CVE-2017-14024.md): A Stack-based Buffer Overflow issue was discovered in Schneider Electric InduSoft Web Studio v8.0 SP2 Patch 1 and prior versions, and InTouc (no CVSS, Schneider Electric InduSoft Web Studio and InTouch Machine…)
- [CVE-2017-16804](https://cve.now/CVE-2017-16804.md): In Redmine before 3.2.7 and 3.3.x before 3.3.4, the reminders function in app/models/mailer.rb does not check whether an issue is visible, w (no CVSS)
- [CVE-2017-0889](https://cve.now/CVE-2017-0889.md): Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter clas (no CVSS, thoughtbot paperclip ruby gem · paperclip)
- [CVE-2017-0904](https://cve.now/CVE-2017-0904.md): The private\_address\_check ruby gem before 0.4.0 is vulnerable to a bypass due to use of Ruby's Resolv.getaddresses method, which is OS-depen (no CVSS, jtdowney private\_address\_check ruby gem · private\_address\_c…)
- [CVE-2017-0905](https://cve.now/CVE-2017-0905.md): The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerabl (no CVSS, recurly ruby gem · recurly)
- [CVE-2017-0906](https://cve.now/CVE-2017-0906.md): The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vu (no CVSS, recurly python module · recurly)
- [CVE-2017-0907](https://cve.now/CVE-2017-0907.md): The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Reques (no CVSS, recurly-api-client .NET library · recurly-api-client)
- [CVE-2017-14388](https://cve.now/CVE-2017-14388.md): Cloud Foundry Foundation GrootFS release 0.3.x versions prior to 0.30.0 do not validate DiffIDs, allowing specially crafted images to poison (no CVSS, GrootFS release GrootFS release 0.3.x versions prior to)
- [CVE-2017-16803](https://cve.now/CVE-2017-16803.md): In Libav through 11.11 and 12.x through 12.1, the smacker\_decode\_tree function in libavcodec/smacker.c does not properly restrict tree recur (no CVSS)
- [CVE-2017-16802](https://cve.now/CVE-2017-16802.md): In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name tha (no CVSS)
- [CVE-2017-3767](https://cve.now/CVE-2017-3767.md): A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad p (no CVSS, Lenovo Group Realtek Audio Driver)
- [CVE-2017-9314](https://cve.now/CVE-2017-9314.md): Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DH\_NVR5xxx\_Eng\_P\_V2.616.0000. (no CVSS, Dahua Technologies NVR50XX, VR52XX, VR54XX, VR58XX)
- [CVE-2016-6803](https://cve.now/CVE-2016-6803.md): An installer defect known as an "unquoted Windows search path vulnerability" affected the Apache OpenOffice before 4.1.3 installers for Wind (no CVSS, Apache Software Foundation Apache OpenOffice)
- [CVE-2017-10871](https://cve.now/CVE-2017-10871.md): Buffer overflow in NTT DOCOMO Wi-Fi STATION L-02F Software version L02F-MDM9625-V10h-JUN-23-2017-DCM-JP and earlier allows an attacker to ex (no CVSS, NTT DOCOMO Wi-Fi STATION L-02F Software)
- [CVE-2017-10875](https://cve.now/CVE-2017-10875.md): I-O DATA DEVICE LAN DISK Connect Ver2.02 and earlier allows an attacker to cause a denial of service in the application via unspecified vect (no CVSS, I-O DATA DEVICE LAN DISK Connect)
- [CVE-2017-10885](https://cve.now/CVE-2017-10885.md): Untrusted search path vulnerability in HYPER SBI Ver. (no CVSS, SBI SECURITIES Co. HYPER SBI)
- [CVE-2017-3166](https://cve.now/CVE-2017-3166.md): In Apache Hadoop versions 2.6.1 to 2.6.5, 2.7.0 to 2.7.3, and 3.0.0-alpha1, if a file in an encryption zone with access permissions that mak (no CVSS, Apache Software Foundation Apache Hadoop · org.apache.hadoo…)
- [CVE-2017-7739](https://cve.now/CVE-2017-7739.md): A reflected Cross-site Scripting (XSS) vulnerability in web proxy disclaimer response web pages in Fortinet FortiOS 5.6.0, 5.4.0 to 5.4.5, 5 (no CVSS, Fortinet FortiOS)
- [CVE-2017-11169](https://cve.now/CVE-2017-11169.md): Privilege Escalation on iBall iB-WRA300N3GT iB-WRA300N3GT\_1.1.1 devices allows remote authenticated users to obtain root privileges by lever (no CVSS)
- [CVE-2017-14711](https://cve.now/CVE-2017-14711.md): The Kickbase GmbH "Kickbase Bundesliga Manager" app before 2.2.1 -- aka kickbase-bundesliga-manager/id678241305 -- for iOS is vulnerable to (no CVSS)
- [CVE-2017-16792](https://cve.now/CVE-2017-16792.md): Stored cross-site scripting (XSS) vulnerability in "geminabox" (Gem in a Box) before 0.13.10 allows attackers to inject arbitrary web script (no CVSS, geminabox)
- [CVE-2017-16801](https://cve.now/CVE-2017-16801.md): Cross-site scripting (XSS) vulnerability in Octopus Deploy 3.7.0-3.17.13 (fixed in 3.17.14) allows remote authenticated users to inject arbi (no CVSS)
- [CVE-2017-8806](https://cve.now/CVE-2017-8806.md): The Debian pg\_ctlcluster, pg\_createcluster, and pg\_upgradecluster scripts, as distributed in the Debian postgresql-common package before 181 (no CVSS, PostgreSQL-related scripts that are specific to Debian and…)
- [CVE-2017-13783](https://cve.now/CVE-2017-13783.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13784](https://cve.now/CVE-2017-13784.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13785](https://cve.now/CVE-2017-13785.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13786](https://cve.now/CVE-2017-13786.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13788](https://cve.now/CVE-2017-13788.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13789](https://cve.now/CVE-2017-13789.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13790](https://cve.now/CVE-2017-13790.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13791](https://cve.now/CVE-2017-13791.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13792](https://cve.now/CVE-2017-13792.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13793](https://cve.now/CVE-2017-13793.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13794](https://cve.now/CVE-2017-13794.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13795](https://cve.now/CVE-2017-13795.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13796](https://cve.now/CVE-2017-13796.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13797](https://cve.now/CVE-2017-13797.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13798](https://cve.now/CVE-2017-13798.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13799](https://cve.now/CVE-2017-13799.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13800](https://cve.now/CVE-2017-13800.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13801](https://cve.now/CVE-2017-13801.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13802](https://cve.now/CVE-2017-13802.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13803](https://cve.now/CVE-2017-13803.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13804](https://cve.now/CVE-2017-13804.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13805](https://cve.now/CVE-2017-13805.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13807](https://cve.now/CVE-2017-13807.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13808](https://cve.now/CVE-2017-13808.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13809](https://cve.now/CVE-2017-13809.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13810](https://cve.now/CVE-2017-13810.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13811](https://cve.now/CVE-2017-13811.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13812](https://cve.now/CVE-2017-13812.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13813](https://cve.now/CVE-2017-13813.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13814](https://cve.now/CVE-2017-13814.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13815](https://cve.now/CVE-2017-13815.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13816](https://cve.now/CVE-2017-13816.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13817](https://cve.now/CVE-2017-13817.md): An out-of-bounds read issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13818](https://cve.now/CVE-2017-13818.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13819](https://cve.now/CVE-2017-13819.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13820](https://cve.now/CVE-2017-13820.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13821](https://cve.now/CVE-2017-13821.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13822](https://cve.now/CVE-2017-13822.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13823](https://cve.now/CVE-2017-13823.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13824](https://cve.now/CVE-2017-13824.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13825](https://cve.now/CVE-2017-13825.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13828](https://cve.now/CVE-2017-13828.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13829](https://cve.now/CVE-2017-13829.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13830](https://cve.now/CVE-2017-13830.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13831](https://cve.now/CVE-2017-13831.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13832](https://cve.now/CVE-2017-13832.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13833](https://cve.now/CVE-2017-13833.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13834](https://cve.now/CVE-2017-13834.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13836](https://cve.now/CVE-2017-13836.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13838](https://cve.now/CVE-2017-13838.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13840](https://cve.now/CVE-2017-13840.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13841](https://cve.now/CVE-2017-13841.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13842](https://cve.now/CVE-2017-13842.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13843](https://cve.now/CVE-2017-13843.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13844](https://cve.now/CVE-2017-13844.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13846](https://cve.now/CVE-2017-13846.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13849](https://cve.now/CVE-2017-13849.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13852](https://cve.now/CVE-2017-13852.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7113](https://cve.now/CVE-2017-7113.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-7132](https://cve.now/CVE-2017-7132.md): An issue was discovered in certain Apple products. (no CVSS)
- [CVE-2017-13782](https://cve.now/CVE-2017-13782.md): An issue was discovered in certain Apple products. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-11-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.