# CVEs published 2017-11-14

22 CVEs were published on November 14, 2017: 1 critical, 0 high. Days are UTC.

- [CVE-2017-10266](https://cve.now/CVE-2017-10266.md): Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). (no CVSS, Oracle Tuxedo)
- [CVE-2017-10267](https://cve.now/CVE-2017-10267.md): Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). (no CVSS, Oracle Tuxedo)
- [CVE-2017-10269](https://cve.now/CVE-2017-10269.md): Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). (no CVSS, Oracle Tuxedo)
- [CVE-2017-10272](https://cve.now/CVE-2017-10272.md): Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). (no CVSS, Oracle Tuxedo)
- [CVE-2017-10278](https://cve.now/CVE-2017-10278.md): Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Security). (no CVSS, Oracle Tuxedo)
- [CVE-2017-16820](https://cve.now/CVE-2017-16820.md): The csnmp\_read\_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in a certain error case, (no CVSS)
- [CVE-2017-3891](https://cve.now/CVE-2017-3891.md): In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default configuration of the QNX (CVSS 9.6, BlackBerry QNX Software Development Platform)
- [CVE-2017-3892](https://cve.now/CVE-2017-3892.md): In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure vulnerability in the default configuration of the QNX (CVSS 3.8, BlackBerry QNX Software Development Platform)
- [CVE-2017-3893](https://cve.now/CVE-2017-3893.md): Incomplete vulnerability mitigations (CVSS 1.9, BlackBerry QNX Software Development Platform)
- [CVE-2017-9369](https://cve.now/CVE-2017-9369.md): In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulnerability in the defaul (CVSS 3.8, BlackBerry QNX Software Development Platform)
- [CVE-2017-9371](https://cve.now/CVE-2017-9371.md): In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerability in the default conf (CVSS 2.6, BlackBerry QNX Software Development Platform)
- [CVE-2017-9394](https://cve.now/CVE-2017-9394.md): A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute (no CVSS, CA Technologies CA Identity Governance)
- [CVE-2017-12635](https://cve.now/CVE-2017-12635.md): Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x b (no CVSS, Apache Software Foundation Apache CouchDB)
- [CVE-2017-12636](https://cve.now/CVE-2017-12636.md): CouchDB administrative users can configure the database server via HTTP(S). (no CVSS, Apache Software Foundation Apache CouchDB)
- [CVE-2017-16815](https://cve.now/CVE-2017-16815.md): installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has XSS because the values (no CVSS)
- [CVE-2017-16239](https://cve.now/CVE-2017-16239.md): In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able (no CVSS, nova)
- [CVE-2017-6264](https://cve.now/CVE-2017-6264.md): An elevation of privilege vulnerability exists in the NVIDIA GPU driver (gm20b\_clk\_throt\_set\_cdev\_state), where an out of bound memory read (no CVSS, Nvidia Android)
- [CVE-2017-9085](https://cve.now/CVE-2017-9085.md): Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitrary web script via the (no CVSS)
- [CVE-2017-12624](https://cve.now/CVE-2017-12624.md): Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. (no CVSS, Apache Software Foundation Apache CXF · org.apache.cxf:cxf-…)
- [CVE-2017-6274](https://cve.now/CVE-2017-6274.md): An elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds checks in the thermal throttle driver can cause (no CVSS, Nvidia Pixel)
- [CVE-2017-6275](https://cve.now/CVE-2017-6275.md): An information disclosure vulnerability exists in the Thermal Driver, where a missing bounds checking in the thermal driver could allow a re (no CVSS, Nvidia Pixel)
- [CVE-2017-16810](https://cve.now/CVE-2017-16810.md): Cross-site scripting (XSS) vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 (fixed in 3.13.7) allows remote attackers t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-11-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.