CVEs published November 14, 2017
22 CVEs were published on November 14, 2017: 1 critical, 0 high.
- Published
- 22
- Critical
- 1
- High
- 0
- Medium
- 0
- Low
- 4
- Unrated
- 17
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- BlackBerry QNX Software Development Platform
- 5
- Oracle Tuxedo
- 5
- Apache Software Foundation Apache CouchDB
- 2
- Nvidia Pixel
- 2
- Apache Software Foundation Apache CXF · org.apache.cxf:cxf-…
- 1
- CA Technologies CA Identity Governance
- 1
- nova
- 1
- Nvidia Android
- 1
Critical 1
Medium, low and unrated 21
- CVE-2017-10266Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core).Oracle Tuxedo
- CVE-2017-10267Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core).Oracle Tuxedo
- CVE-2017-10269Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core).Oracle Tuxedo
- CVE-2017-10272Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core).Oracle Tuxedo
- CVE-2017-10278Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Security).Oracle Tuxedo
- CVE-2017-16820The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case,
- CVE-2017-3892In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure vulnerability in the default configuration of the QNXBlackBerry QNX Software Development Platform
- CVE-2017-3893Incomplete vulnerability mitigationsBlackBerry QNX Software Development Platform
- CVE-2017-9369In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulnerability in the defaulBlackBerry QNX Software Development Platform
- CVE-2017-9371In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default confBlackBerry QNX Software Development Platform
- CVE-2017-9394A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute CA Technologies CA Identity Governance
- CVE-2017-12635Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x bApache Software Foundation Apache CouchDB
- CVE-2017-12636CouchDB administrative users can configure the database server via HTTP(S).Apache Software Foundation Apache CouchDB
- CVE-2017-16815installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has XSS because the values
- CVE-2017-16239In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be ablenova
- CVE-2017-6264An elevation of privilege vulnerability exists in the NVIDIA GPU driver (gm20b_clk_throt_set_cdev_state), where an out of bound memory read Nvidia Android
- CVE-2017-9085Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the
- CVE-2017-12624Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications.Apache Software Foundation Apache CXF · org.apache.cxf:cxf-…
- CVE-2017-6274An elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds checks in the thermal throttle driver can causeNvidia Pixel
- CVE-2017-6275An information disclosure vulnerability exists in the Thermal Driver, where a missing bounds checking in the thermal driver could allow a reNvidia Pixel
- CVE-2017-16810Cross-site scripting (XSS) vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 (fixed in 3.13.7) allows remote attackers t