CVEs published November 17, 2017
100 CVEs were published on November 17, 2017: 0 critical, 0 high.
- Published
- 100
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 100
- Now in CISA KEV
- 0
- Fix available
- 18
Most affected products
- ejs
- 3
- VMware Workstation · VMware Horizon View Client for Windows
- 3
- october/october
- 2
- VMware Workstation · VMware Fusion
- 2
- BOOK WALKER Co. BOOK WALKER for Windows
- 1
- BOOK WALKER Co. BOOK WALKER for Windows · BOOK WALKER Co. B…
- 1
- codeigniter4/framework
- 1
- com.neovisionaries:nv-websocket-client
- 1
- filp/whoops
- 1
- Frogman Office CS-Cart Japanese Edition · Frogman Office CS…
- 1
Medium, low and unrated 100
- CVE-2017-16566On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or repla
- CVE-2017-1000126exiv2 0.26 contains a Stack out of bounds read in webp parser
- CVE-2017-1000127Exiv2 0.26 contains a heap buffer overflow in tiff parser
- CVE-2017-1000128Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser
- CVE-2017-1000217Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting inorg.opencastproject:base
- CVE-2017-1000221In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will haorg.opencastproject:opencast-kernel
- CVE-2017-1000163The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redir
- CVE-2017-1000190SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on.org.simpleframework:simple-xml
- CVE-2017-1000227Stored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almost anything an admin c
- CVE-2017-1000230The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementatio
- CVE-2017-16880The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS.filp/whoops
- CVE-2017-4939VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loaded by the applicationVMware Workstation
- CVE-2017-1000215ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution
- CVE-2017-14111The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and earlier records doma
- CVE-2017-16845hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access.
- CVE-2017-6168On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3)
- CVE-2017-1000168sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keyssodiumoxide
- CVE-2017-1000169QuickerBB version <= 0.7.2 is vulnerable to arbitrary file writes which can lead to remote code execution.
- CVE-2017-1000170jqueryFileTree 2.1.5 and older Directory Traversaljqueryfiletree
- CVE-2017-13700An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices.
- CVE-2017-13702An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices.
- CVE-2017-13703An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices.
- CVE-2017-1000191Jool 3.5.0-3.5.1 is vulnerable to a kernel crashing packet resulting in a DOS.
- CVE-2017-1000192Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion.
- CVE-2017-16819A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to in
- CVE-2017-16877ZEIT Next.js before 2.4.1 has directory traversal under the /_next and /static request namespace, allowing attackers to obtain sensitive infnext
- CVE-2017-16875An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1.
- CVE-2017-1000203ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon resulting in remote code e
- CVE-2017-1000206samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary c
- CVE-2017-1000211Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML_put_string() can a
- CVE-2017-1000212Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server.
- CVE-2017-10886Cross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese EditiFrogman Office CS-Cart Japanese Edition · Frogman Office CS…
- CVE-2017-10887Untrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an attacker to gain privileges via a Trojan horsBOOK WALKER Co. BOOK WALKER for Windows
- CVE-2017-10888BOOK WALKER for Windows Ver.1.2.9 and earlier, BOOK WALKER for Mac Ver.1.2.5 and earlier allow an attacker to access local files via unspeciBOOK WALKER Co. BOOK WALKER for Windows · BOOK WALKER Co. B…
- CVE-2017-10889TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors.tablepress.org TablePress
- CVE-2017-10890Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmwaSharp RX-V200 firmware · Sharp RX-V100 firmware +3
- CVE-2017-4927VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP network packets which VMware vCenter Server
- CVE-2017-4928The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e.VMware vSphere Web Client
- CVE-2017-4929VMware NSX Edge (6.2.x before 6.2.9 and 6.3.x before 6.3.5) contains a moderate Cross-Site Scripting (XSS) issue which may lead to informatiVMware NSX Edge
- CVE-2017-4934VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device.VMware Workstation · VMware Fusion
- CVE-2017-4935VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds write vulnerability VMware Workstation · VMware Horizon View Client for Windows
- CVE-2017-4936VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability iVMware Workstation · VMware Horizon View Client for Windows
- CVE-2017-4937VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability iVMware Workstation · VMware Horizon View Client for Windows
- CVE-2017-4938VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability.VMware Workstation · VMware Fusion
- CVE-2017-16868In SWFTools 0.9.2, the wav_convert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows
- CVE-2017-16869p_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have u
- CVE-2017-16870The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraft_ajax_handler function in /wp-content/plugins/updraftplus/admin.
- CVE-2017-16871The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the plupload_action function in /wp-content/pl
- CVE-2017-16872An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1.
- CVE-2017-1000125Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell.
- CVE-2017-1000129Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information disclosure
- CVE-2017-1000160EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection
- CVE-2017-1000164Tine 2.0 version 2017.02.4 is vulnerable to XSS in the Addressbook resulting code execution and privilege escalation
- CVE-2017-1000223A stored web content injection vulnerability (WCI, a.k.a XSS) is present in MODX Revolution CMS version 2.5.6 and earlier.
- CVE-2017-1000225Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssi_didyoumean() could allow unauthenticated attacker to do almost anyt
- CVE-2017-1000226Stop User Enumeration 1.3.8 allows user enumeration via the REST API
- CVE-2017-1000229Integer overflow bug in function minitiff_read_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of servic
- CVE-2017-1000231A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors.
- CVE-2017-1000232A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors.
- CVE-2017-1000234I, Librarian version <=4.6 & 4.7 is vulnerable to Directory Enumeration in the jqueryFileTree.php resulting in attacker enumerating director
- CVE-2017-1000235I, Librarian version <=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised.
- CVE-2017-1000236I, Librarian version <=4.6 & 4.7 is vulnerable to Reflected Cross-Site Scripting in the temp.php resulting in an attacker being able to inje
- CVE-2017-1000237I, Librarian version <=4.6 & 4.7 is vulnerable to Server-Side Request Forgery in the ajaxsupplement.php resulting in the attacker being able
- CVE-2017-1000246Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak enpysaml2
- CVE-2017-1000247British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the set_status_header() common functioncodeigniter4/framework
- CVE-2017-1000248Redis-store <=v1.3.0 allows unsafe objects to be loaded from redisredis-store
- CVE-2017-1000172Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution.
- CVE-2017-1000173Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution.
- CVE-2017-1000188nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injectionejs
- CVE-2017-1000189nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile()ejs
- CVE-2017-1000228nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() functionejs
- CVE-2017-1000238InvoicePlane version 1.4.10 is vulnerable to a Arbitrary File Upload resulting in an authenticated user can upload a malicious file to the w
- CVE-2017-1000239InvoicePlane version 1.4.10 is vulnerable to a Stored Cross Site Scripting resulting in allowing an authenticated user to inject malicious c
- CVE-2017-1000240The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting (XSS) vulnerabilities affecting version 5.0.0 and pr
- CVE-2017-1000241The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability.
- CVE-2017-1000193October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim'october/october
- CVE-2017-1000194October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and possoctober/october
- CVE-2017-1000195October CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting in ability to delete files limited by file
- CVE-2017-1000196October CMS build 412 is vulnerable to PHP code execution in the asset manager functionality resulting in site compromise and possibly other
- CVE-2017-1000197October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on
- CVE-2017-1000198tcmu-runner daemon version 0.9.0 to 1.2.0 is vulnerable to invalid memory references in the handler_glfs.so handler resulting in denial of s
- CVE-2017-1000199tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handler_qcow.so resulting in non-privileged users being able
- CVE-2017-1000200tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemon's on_unregister_hand
- CVE-2017-1000201The tcmu-runner daemon in tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a local denial of service attack
- CVE-2017-1000208A vulnerability in Swagger-Parser's (version <= 1.0.30) yaml parsing functionality results in arbitrary code being executed when a maliciousio.swagger:swagger-codegen · io.swagger:swagger-parser
- CVE-2017-1000209The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (Ccom.neovisionaries:nv-websocket-client
- CVE-2017-1000174In SWFTools, an address access exception was found in swfdump swf_GetBits().
- CVE-2017-1000176In SWFTools, a memcpy buffer overflow was found in swfc.
- CVE-2017-1000182In SWFTools, a memory leak was found in wav2swf.
- CVE-2017-1000185In SWFTools, a memcpy buffer overflow was found in gif2swf.
- CVE-2017-1000186In SWFTools, a stack overflow was found in pdf2swf.
- CVE-2017-1000187In SWFTools, an address access exception was found in pdf2swf.
- CVE-2017-1000210picoTCP (versions 1.7.0 - 1.5.0) is vulnerable to stack buffer overflow resulting in code execution or denial of service attack
- CVE-2017-1000213WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools/tool.php?tool=user_search
- CVE-2017-1000220soyuka/pidusage <=1.1.4 is vulnerable to command injection in the module resulting in arbitrary command executionpidusage
- CVE-2017-1000158CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString_DecodeEscape function in stringobject.c, resulting in
- CVE-2017-1000218LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code exec
- CVE-2017-1000219npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js userwindows-cpu
- CVE-2017-1000224CSRF in YouTube (WordPress plugin) could allow unauthenticated attacker to change any setting within the plugin
- CVE-2017-15517AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors.NetApp AltaVault OST Plug-in