# CVEs published 2017-11-16

124 CVEs were published on November 16, 2017: 0 critical, 1 high. Days are UTC.

- [CVE-2017-0830](https://cve.now/CVE-2017-0830.md): An elevation of privilege vulnerability in the Android framework (device policy client). (no CVSS, Google Android)
- [CVE-2017-0831](https://cve.now/CVE-2017-0831.md): An elevation of privilege vulnerability in the Android framework (window manager). (no CVSS, Google Android)
- [CVE-2017-0832](https://cve.now/CVE-2017-0832.md): A remote code execution vulnerability in the Android media framework (libmpeg2). (no CVSS, Google Android)
- [CVE-2017-0833](https://cve.now/CVE-2017-0833.md): A remote code execution vulnerability in the Android media framework (libavc). (no CVSS, Google Android)
- [CVE-2017-0834](https://cve.now/CVE-2017-0834.md): A remote code execution vulnerability in the Android media framework (libmpeg2). (no CVSS, Google Android)
- [CVE-2017-0835](https://cve.now/CVE-2017-0835.md): A remote code execution vulnerability in the Android media framework (libmpeg2). (no CVSS, Google Android)
- [CVE-2017-0836](https://cve.now/CVE-2017-0836.md): A remote code execution vulnerability in the Android media framework (libhevc). (no CVSS, Google Android)
- [CVE-2017-0838](https://cve.now/CVE-2017-0838.md): An elevation of privilege vulnerability in the Android media framework (libstagefright). (no CVSS, Google Android)
- [CVE-2017-0839](https://cve.now/CVE-2017-0839.md): An information disclosure vulnerability in the Android media framework (libeffects). (no CVSS, Google Android)
- [CVE-2017-0840](https://cve.now/CVE-2017-0840.md): An information disclosure vulnerability in the Android media framework (libstagefright). (no CVSS, Google Android)
- [CVE-2017-0841](https://cve.now/CVE-2017-0841.md): A remote code execution vulnerability in the Android system (libutils). (no CVSS, Google Android)
- [CVE-2017-0842](https://cve.now/CVE-2017-0842.md): An elevation of privilege vulnerability in the Android system (bluetooth). (no CVSS, Google Android)
- [CVE-2017-0843](https://cve.now/CVE-2017-0843.md): An elevation of privilege vulnerability in the MediaTek ccci. (no CVSS, Google Android)
- [CVE-2017-0845](https://cve.now/CVE-2017-0845.md): A denial of service vulnerability in the Android framework (syncstorageengine). (no CVSS, Google Android)
- [CVE-2017-0847](https://cve.now/CVE-2017-0847.md): An elevation of privilege vulnerability in the Android media framework (mediaanalytics). (no CVSS, Google Android)
- [CVE-2017-0848](https://cve.now/CVE-2017-0848.md): An information disclosure vulnerability in the Android media framework (libeffects). (no CVSS, Google Android)
- [CVE-2017-0849](https://cve.now/CVE-2017-0849.md): An information disclosure vulnerability in the Android media framework (libavc). (no CVSS, Google Android)
- [CVE-2017-0850](https://cve.now/CVE-2017-0850.md): An information disclosure vulnerability in the Android media framework (libstagefright). (no CVSS, Google Android)
- [CVE-2017-0851](https://cve.now/CVE-2017-0851.md): An information disclosure vulnerability in the Android media framework (libhevc). (no CVSS, Google Android)
- [CVE-2017-0852](https://cve.now/CVE-2017-0852.md): A denial of service vulnerability in the Android media framework (libhevc). (no CVSS, Google Android)
- [CVE-2017-0853](https://cve.now/CVE-2017-0853.md): An information disclosure vulnerability in the Android media framework (n/a). (no CVSS, Google Android)
- [CVE-2017-0854](https://cve.now/CVE-2017-0854.md): An information disclosure vulnerability in the Android media framework (n/a). (no CVSS, Google Android)
- [CVE-2017-0857](https://cve.now/CVE-2017-0857.md): Another vulnerability in the Android media framework (n/a). (no CVSS, Google Android)
- [CVE-2017-0858](https://cve.now/CVE-2017-0858.md): Another vulnerability in the Android media framework (n/a). (no CVSS, Google Android)
- [CVE-2017-0859](https://cve.now/CVE-2017-0859.md): Another vulnerability in the Android media framework (n/a). (no CVSS, Google Android)
- [CVE-2017-0860](https://cve.now/CVE-2017-0860.md): An elevation of privilege vulnerability in the Android system (inputdispatcher). (no CVSS, Google Android)
- [CVE-2017-0861](https://cve.now/CVE-2017-0861.md): Use-after-free vulnerability in the snd\_pcm\_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via (no CVSS, Google Android)
- [CVE-2017-0862](https://cve.now/CVE-2017-0862.md): An elevation of privilege vulnerability in the Upstream kernel kernel. (no CVSS, Google Android)
- [CVE-2017-0863](https://cve.now/CVE-2017-0863.md): An elevation of privilege vulnerability in the Upstream kernel video driver. (no CVSS, Google Android)
- [CVE-2017-0864](https://cve.now/CVE-2017-0864.md): An elevation of privilege vulnerability in the MediaTek ioctl (flashlight). (no CVSS, Google Android)
- [CVE-2017-0865](https://cve.now/CVE-2017-0865.md): An elevation of privilege vulnerability in the MediaTek soc driver. (no CVSS, Google Android)
- [CVE-2017-0866](https://cve.now/CVE-2017-0866.md): An elevation of privilege vulnerability in the Direct rendering infrastructure of the NVIDIA Tegra X1 where an unchecked input from userspac (no CVSS)
- [CVE-2017-0909](https://cve.now/CVE-2017-0909.md): The private\_address\_check ruby gem before 0.4.1 is vulnerable to a bypass due to an incomplete blacklist of common private/local network add (no CVSS, HackerOne private\_address\_check ruby gem · private\_address\_…)
- [CVE-2017-11012](https://cve.now/CVE-2017-11012.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, when processing a specially (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11013](https://cve.now/CVE-2017-11013.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, countOffset (in function Unp (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11014](https://cve.now/CVE-2017-11014.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while parsing a Measurement (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11015](https://cve.now/CVE-2017-11015.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, currently, the value of SIR\_ (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11017](https://cve.now/CVE-2017-11017.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing a specially c (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11018](https://cve.now/CVE-2017-11018.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, array access out of bounds m (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11022](https://cve.now/CVE-2017-11022.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the probe requests originate (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11023](https://cve.now/CVE-2017-11023.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, there is a possibility of ou (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11024](https://cve.now/CVE-2017-11024.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a race condition in the rmne (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11025](https://cve.now/CVE-2017-11025.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, due to a race condition in t (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11026](https://cve.now/CVE-2017-11026.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing FRP partition (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11027](https://cve.now/CVE-2017-11027.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while flashing UBI image, si (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11028](https://cve.now/CVE-2017-11028.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the ISP Camera driver, th (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11029](https://cve.now/CVE-2017-11029.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, camera application triggers (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11032](https://cve.now/CVE-2017-11032.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a double free can occur when (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11035](https://cve.now/CVE-2017-11035.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, possible buffer overflow or (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11038](https://cve.now/CVE-2017-11038.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing the boot im (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11058](https://cve.now/CVE-2017-11058.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing a specially (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11073](https://cve.now/CVE-2017-11073.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, the qcacld pktlog allows map (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11085](https://cve.now/CVE-2017-11085.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, an integer overflow leading (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11089](https://cve.now/CVE-2017-11089.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overread is observe (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11090](https://cve.now/CVE-2017-11090.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overread is observe (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11091](https://cve.now/CVE-2017-11091.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the function mdss\_rotator (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11092](https://cve.now/CVE-2017-11092.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the KGSL driver function (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-11093](https://cve.now/CVE-2017-11093.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer Over-read in Display (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-15516](https://cve.now/CVE-2017-15516.md): NetApp SnapCenter Server versions 1.1 through 2.x are susceptible to a Cross-Site Request Forgery (CSRF) vulnerability which could be used t (no CVSS, NetApp SnapCenter Server)
- [CVE-2017-8279](https://cve.now/CVE-2017-8279.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, missing race condition prote (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-9690](https://cve.now/CVE-2017-9690.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in a qbt1000 ioctl handler, (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-9696](https://cve.now/CVE-2017-9696.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, buffer over-read is possible (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-9701](https://cve.now/CVE-2017-9701.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, while processing OEM unlock/ (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-9702](https://cve.now/CVE-2017-9702.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a user-space pointer is dire (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-9719](https://cve.now/CVE-2017-9719.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the kernel driver MDSS, a (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-9721](https://cve.now/CVE-2017-9721.md): In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, in the boot loader, a buffer (no CVSS, Qualcomm Android for MSM, Firefox OS for MSM, QRD Android)
- [CVE-2017-14028](https://cve.now/CVE-2017-14028.md): A Resource Exhaustion issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Versio (no CVSS, Moxa NPort 5110, 5130, and)
- [CVE-2017-16715](https://cve.now/CVE-2017-16715.md): An Information Exposure issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Vers (CVSS 8.6, Moxa NPort 5110, 5130, and)
- [CVE-2017-16719](https://cve.now/CVE-2017-16719.md): An Injection issue was discovered in Moxa NPort 5110 Version 2.2, NPort 5110 Version 2.4, NPort 5110 Version 2.6, NPort 5110 Version 2.7, NP (no CVSS, Moxa NPort 5110, 5130, and)
- [CVE-2017-16843](https://cve.now/CVE-2017-16843.md): Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic. (no CVSS)
- [CVE-2017-16866](https://cve.now/CVE-2017-16866.md): dayrui FineCms 5.2.0 before 2017.11.16 has Cross Site Scripting (XSS) in core/M\_Controller.php via the DR\_URI field. (no CVSS)
- [CVE-2017-16867](https://cve.now/CVE-2017-16867.md): Amazon Key through 2017-11-16 mishandles Cloud Cam 802.11 deauthentication frames during the delivery process, which makes it easier for (1) (no CVSS)
- [CVE-2017-4930](https://cve.now/CVE-2017-4930.md): VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an (no CVSS, VMware AirWatch Console)
- [CVE-2017-4931](https://cve.now/CVE-2017-4931.md): VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add malicious data to an e (no CVSS, VMware AirWatch Console)
- [CVE-2017-4932](https://cve.now/CVE-2017-4932.md): VMware AirWatch Launcher for Android prior to 3.2.2 contains a vulnerability that could allow an escalation of privilege from the launcher U (no CVSS, VMware AirWatch Launcher for Android)
- [CVE-2017-1086](https://cve.now/CVE-2017-1086.md): In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, not all information in (no CVSS, FreeBSD)
- [CVE-2017-1087](https://cve.now/CVE-2017-1087.md): In FreeBSD 10.x before 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24 named paths are globally scoped, meaning a process located in one (no CVSS, FreeBSD)
- [CVE-2017-1088](https://cve.now/CVE-2017-1088.md): In FreeBSD before 11.1-STABLE, 11.1-RELEASE-p4, 11.0-RELEASE-p15, 10.4-STABLE, 10.4-RELEASE-p3, and 10.3-RELEASE-p24, the kernel does not pr (no CVSS, FreeBSD)
- [CVE-2017-16846](https://cve.now/CVE-2017-16846.md): Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /manageApplications.do?method=AddSubGroup haid par (no CVSS)
- [CVE-2017-16847](https://cve.now/CVE-2017-16847.md): Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a showPla (no CVSS)
- [CVE-2017-16848](https://cve.now/CVE-2017-16848.md): Zoho ManageEngine Applications Manager 13 allows SQL injection via the /manageConfMons.do groupname parameter. (no CVSS)
- [CVE-2017-16849](https://cve.now/CVE-2017-16849.md): Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do?method=viewDashBoard forpage parameter. (no CVSS)
- [CVE-2017-16850](https://cve.now/CVE-2017-16850.md): Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /showresource.do resourceid parameter in a getReso (no CVSS)
- [CVE-2017-16851](https://cve.now/CVE-2017-16851.md): Zoho ManageEngine Applications Manager 13 before build 13530 allows SQL injection via the /MyPage.do widgetid parameter. (no CVSS)
- [CVE-2017-16852](https://cve.now/CVE-2017-16852.md): shibsp/metadata/DynamicMetadataProvider.cpp in the Dynamic MetadataProvider plugin in Shibboleth Service Provider before 2.6.1 fails to prop (no CVSS)
- [CVE-2017-16853](https://cve.now/CVE-2017-16853.md): The DynamicMetadataProvider class in saml/saml2/metadata/impl/DynamicMetadataProvider.cpp in OpenSAML-C in OpenSAML before 2.6.1 fails to pr (no CVSS)
- [CVE-2017-15864](https://cve.now/CVE-2017-15864.md): In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like (no CVSS)
- [CVE-2017-16560](https://cve.now/CVE-2017-16560.md): SanDisk Secure Access 3.01 vault decrypts and copies encrypted files to a temporary folder, where they can remain indefinitely in certain si (no CVSS)
- [CVE-2017-16777](https://cve.now/CVE-2017-16777.md): If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can crea (no CVSS)
- [CVE-2017-16844](https://cve.now/CVE-2017-16844.md): Heap-based buffer overflow in the loadbuf function in formisc.c in formail in procmail 3.22 allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2017-5738](https://cve.now/CVE-2017-5738.md): Escalation of privilege vulnerability in admin portal for Intel Unite App versions 3.1.32.12, 3.1.41.18 and 3.1.45.26 allows an attacker wit (no CVSS, Intel Unite App)
- [CVE-2017-12290](https://cve.now/CVE-2017-12290.md): Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticate (no CVSS, Cisco Registered Envelope Service)
- [CVE-2017-12291](https://cve.now/CVE-2017-12291.md): Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticate (no CVSS, Cisco Registered Envelope Service)
- [CVE-2017-12292](https://cve.now/CVE-2017-12292.md): Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticate (no CVSS, Cisco Registered Envelope Service)
- [CVE-2017-12299](https://cve.now/CVE-2017-12299.md): A vulnerability exists in the process of creating default IP blocks during device initialization for Cisco ASA Next-Generation Firewall Serv (no CVSS, Cisco ASA Next-Generation Firewall Services)
- [CVE-2017-12300](https://cve.now/CVE-2017-12300.md): A vulnerability in the SNORT detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a (no CVSS, Cisco Firepower System Software)
- [CVE-2017-12302](https://cve.now/CVE-2017-12302.md): A vulnerability in the Cisco Unified Communications Manager SQL database interface could allow an authenticated, remote attacker to impact t (no CVSS, Cisco Unified Communications Manager)
- [CVE-2017-12303](https://cve.now/CVE-2017-12303.md): A vulnerability in the Advanced Malware Protection (AMP) file filtering feature of Cisco AsyncOS Software for Cisco Web Security Appliance ( (no CVSS, Cisco Web Security Appliance)
- [CVE-2017-12304](https://cve.now/CVE-2017-12304.md): A vulnerability in the IOS daemon (IOSd) web-based management interface of Cisco IOS and IOS XE Software could allow an unauthenticated, rem (no CVSS, Cisco IOS and IOS XE)
- [CVE-2017-12305](https://cve.now/CVE-2017-12305.md): A vulnerability in the debug interface of Cisco IP Phone 8800 series could allow an authenticated, local attacker to execute arbitrary comma (no CVSS, Cisco IP Phone 8800 Series)
- [CVE-2017-12306](https://cve.now/CVE-2017-12306.md): A vulnerability in the upgrade process of Cisco Spark Board could allow an authenticated, local attacker to install an unverified upgrade pa (no CVSS, Cisco Spark Board)
- [CVE-2017-12309](https://cve.now/CVE-2017-12309.md): A vulnerability in the Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to conduct a HTTP response split (no CVSS, Cisco Email Security Appliance)
- [CVE-2017-12311](https://cve.now/CVE-2017-12311.md): A vulnerability in the H.264 decoder function of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a Cisco Meeti (no CVSS, Cisco Meeting Server)
- [CVE-2017-12312](https://cve.now/CVE-2017-12312.md): An untrusted search path (aka DLL Preloading) vulnerability in the Cisco Immunet antimalware installer could allow an authenticated, local a (no CVSS, Cisco Immunet Antimalware Installer)
- [CVE-2017-12313](https://cve.now/CVE-2017-12313.md): An untrusted search path (aka DLL Preload) vulnerability in the Cisco Network Academy Packet Tracer software could allow an authenticated, l (no CVSS, Cisco Network Academy Packet Tracer)
- [CVE-2017-12314](https://cve.now/CVE-2017-12314.md): A vulnerability in the Cisco FindIT Network Discovery Utility could allow an authenticated, local attacker to perform a DLL preloading attac (no CVSS, Cisco FindIT Discovery Utility)
- [CVE-2017-12315](https://cve.now/CVE-2017-12315.md): A vulnerability in system logging when replication is being configured with the Cisco HyperFlex System could allow an authenticated, local a (no CVSS, Cisco HyperFlex System)
- [CVE-2017-12316](https://cve.now/CVE-2017-12316.md): A vulnerability in the Guest Portal login page of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to pe (no CVSS, Cisco Identity Services Engine)
- [CVE-2017-12318](https://cve.now/CVE-2017-12318.md): A vulnerability in the TCP state machine of Cisco RF Gateway 1 devices could allow an unauthenticated, remote attacker to prevent an affecte (no CVSS, Cisco RF Gateway)
- [CVE-2017-12320](https://cve.now/CVE-2017-12320.md): Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticate (no CVSS, Cisco Registered Envelope Service)
- [CVE-2017-12321](https://cve.now/CVE-2017-12321.md): Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticate (no CVSS, Cisco Registered Envelope Service)
- [CVE-2017-12322](https://cve.now/CVE-2017-12322.md): Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticate (no CVSS, Cisco Registered Envelope Service)
- [CVE-2017-12323](https://cve.now/CVE-2017-12323.md): Multiple vulnerabilities in the web interface of the Cisco Registered Envelope Service (a cloud-based service) could allow an unauthenticate (no CVSS, Cisco Registered Envelope Service)
- [CVE-2017-12337](https://cve.now/CVE-2017-12337.md): A vulnerability in the upgrade mechanism of Cisco collaboration products based on the Cisco Voice Operating System software platform could a (no CVSS, Cisco Voice Operating System)
- [CVE-2017-12350](https://cve.now/CVE-2017-12350.md): A vulnerability in Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier could allow an authenticated, local attacker to log in to an (no CVSS, Cisco Umbrella Insights Virtual Appliance)
- [CVE-2017-13135](https://cve.now/CVE-2017-13135.md): A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CUData::initialize function in c (no CVSS)
- [CVE-2017-13136](https://cve.now/CVE-2017-13136.md): The image\_alloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc and NULL pointer dereference. (no CVSS)
- [CVE-2017-14034](https://cve.now/CVE-2017-14034.md): The restore\_tqb\_pixels function in hevc\_filter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destinati (no CVSS)
- [CVE-2017-16841](https://cve.now/CVE-2017-16841.md): LanSweeper 6.0.100.75 has XSS via the description parameter to /Calendar/CalendarActions.aspx. (no CVSS)
- [CVE-2017-16842](https://cve.now/CVE-2017-16842.md): Cross-site scripting (XSS) vulnerability in admin/google\_search\_console/class-gsc-table.php in the Yoast SEO plugin before 5.8.0 for WordPre (no CVSS)
- [CVE-2017-16834](https://cve.now/CVE-2017-16834.md): PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg owned by an unprivileged account but root code execution depends on these files, wh (no CVSS)
- [CVE-2017-16836](https://cve.now/CVE-2017-16836.md): Arris TG1682G devices with Comcast TG1682\_2.0s7\_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/a (no CVSS)
- [CVE-2017-16837](https://cve.now/CVE-2017-16837.md): Certain function pointers in Trusted Boot (tboot) through 1.9.6 are not validated and can cause arbitrary code execution, which allows local (no CVSS)
- [CVE-2017-8807](https://cve.now/CVE-2017-8807.md): vbf\_stp\_error in bin/varnishd/cache/cache\_fetch.c in Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before 5.2.1 allows remote attackers to o (no CVSS, Varnish HTTP Cache 4.1.x before 4.1.9 and 5.x before)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-11-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.