# CVEs published 2017-11-17

100 CVEs were published on November 17, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-16566](https://cve.now/CVE-2017-16566.md): On Jooan IP Camera A5 2.3.36 devices, an insecure FTP server does not require authentication, which allows remote attackers to read or repla (no CVSS)
- [CVE-2017-1000126](https://cve.now/CVE-2017-1000126.md): exiv2 0.26 contains a Stack out of bounds read in webp parser (no CVSS)
- [CVE-2017-1000127](https://cve.now/CVE-2017-1000127.md): Exiv2 0.26 contains a heap buffer overflow in tiff parser (no CVSS)
- [CVE-2017-1000128](https://cve.now/CVE-2017-1000128.md): Exiv2 0.26 contains a stack out of bounds read in JPEG2000 parser (no CVSS)
- [CVE-2017-1000217](https://cve.now/CVE-2017-1000217.md): Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in (no CVSS, org.opencastproject:base)
- [CVE-2017-1000221](https://cve.now/CVE-2017-1000221.md): In Opencast 2.2.3 and older if user names overlap, the Opencast search service used for publication to the media modules and players will ha (no CVSS, org.opencastproject:opencast-kernel)
- [CVE-2017-1000163](https://cve.now/CVE-2017-1000163.md): The Phoenix Framework versions 1.0.0 through 1.0.4, 1.1.0 through 1.1.6, 1.2.0, 1.2.2 and 1.3.0-rc.0 are vulnerable to unvalidated URL redir (no CVSS)
- [CVE-2017-1000190](https://cve.now/CVE-2017-1000190.md): SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF, information disclosure, DoS and so on. (no CVSS, org.simpleframework:simple-xml)
- [CVE-2017-1000227](https://cve.now/CVE-2017-1000227.md): Stored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almost anything an admin c (no CVSS)
- [CVE-2017-1000230](https://cve.now/CVE-2017-1000230.md): The Snap7 Server version 1.4.1 can be crashed when the ItemCount field of the ReadVar or WriteVar functions of the S7 protocol implementatio (no CVSS)
- [CVE-2017-16880](https://cve.now/CVE-2017-16880.md): The dump function in Util/TemplateHelper.php in filp whoops before 2.1.13 has XSS. (no CVSS, filp/whoops)
- [CVE-2017-4939](https://cve.now/CVE-2017-4939.md): VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application (no CVSS, VMware Workstation)
- [CVE-2017-1000215](https://cve.now/CVE-2017-1000215.md): ROOT xrootd version 4.6.0 and below is vulnerable to an unauthenticated shell command injection resulting in remote code execution (no CVSS)
- [CVE-2017-14111](https://cve.now/CVE-2017-14111.md): The workstation logging function in Philips IntelliSpace Cardiovascular (ISCV) 2.3.0 and earlier and Xcelera R4.1L1 and earlier records doma (no CVSS)
- [CVE-2017-16845](https://cve.now/CVE-2017-16845.md): hw/input/ps2.c in Qemu does not validate 'rptr' and 'count' values during guest migration, leading to out-of-bounds access. (no CVSS)
- [CVE-2017-6168](https://cve.now/CVE-2017-6168.md): On BIG-IP versions 11.6.0-11.6.2 (fixed in 11.6.2 HF1), 12.0.0-12.1.2 HF1 (fixed in 12.1.2 HF2), or 13.0.0-13.0.0 HF2 (fixed in 13.0.0 HF3) (no CVSS)
- [CVE-2017-1000168](https://cve.now/CVE-2017-1000168.md): sodiumoxide 0.0.13 and older scalarmult() vulnerable to degenerate public keys (no CVSS, sodiumoxide)
- [CVE-2017-1000169](https://cve.now/CVE-2017-1000169.md): QuickerBB version \<= 0.7.2 is vulnerable to arbitrary file writes which can lead to remote code execution. (no CVSS)
- [CVE-2017-1000170](https://cve.now/CVE-2017-1000170.md): jqueryFileTree 2.1.5 and older Directory Traversal (no CVSS, jqueryfiletree)
- [CVE-2017-13700](https://cve.now/CVE-2017-13700.md): An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. (no CVSS)
- [CVE-2017-13702](https://cve.now/CVE-2017-13702.md): An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. (no CVSS)
- [CVE-2017-13703](https://cve.now/CVE-2017-13703.md): An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. (no CVSS)
- [CVE-2017-1000191](https://cve.now/CVE-2017-1000191.md): Jool 3.5.0-3.5.1 is vulnerable to a kernel crashing packet resulting in a DOS. (no CVSS)
- [CVE-2017-1000192](https://cve.now/CVE-2017-1000192.md): Cygnux sysPass version 2.1.7 and older is vulnerable to a Local File Inclusion in the functionality of javascript files inclusion. (no CVSS)
- [CVE-2017-16819](https://cve.now/CVE-2017-16819.md): A stored cross-site scripting vulnerability in the Icon Time Systems RTC-1000 v2.5.7458 and earlier time clock allows remote attackers to in (no CVSS)
- [CVE-2017-16877](https://cve.now/CVE-2017-16877.md): ZEIT Next.js before 2.4.1 has directory traversal under the /\_next and /static request namespace, allowing attackers to obtain sensitive inf (no CVSS, next)
- [CVE-2017-16875](https://cve.now/CVE-2017-16875.md): An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. (no CVSS)
- [CVE-2017-1000203](https://cve.now/CVE-2017-1000203.md): ROOT version 6.9.03 and below is vulnerable to an authenticated shell metacharacter injection in the rootd daemon resulting in remote code e (no CVSS)
- [CVE-2017-1000206](https://cve.now/CVE-2017-1000206.md): samtools htslib library version 1.4.0 and earlier is vulnerable to buffer overflow in the CRAM rANS codec resulting in potential arbitrary c (no CVSS)
- [CVE-2017-1000211](https://cve.now/CVE-2017-1000211.md): Lynx before 2.8.9dev.16 is vulnerable to a use after free in the HTML parser resulting in memory disclosure, because HTML\_put\_string() can a (no CVSS)
- [CVE-2017-1000212](https://cve.now/CVE-2017-1000212.md): Elixir's vim plugin, alchemist.vim is vulnerable to remote code execution in the bundled alchemist-server. (no CVSS)
- [CVE-2017-10886](https://cve.now/CVE-2017-10886.md): Cross-site scripting vulnerability in CS-Cart Japanese Edition v4.3.10 and earlier (excluding v2 and v3), CS-Cart Multivendor Japanese Editi (no CVSS, Frogman Office CS-Cart Japanese Edition · Frogman Office CS…)
- [CVE-2017-10887](https://cve.now/CVE-2017-10887.md): Untrusted search path vulnerability in BOOK WALKER for Windows Ver.1.2.9 and earlier allows an attacker to gain privileges via a Trojan hors (no CVSS, BOOK WALKER Co. BOOK WALKER for Windows)
- [CVE-2017-10888](https://cve.now/CVE-2017-10888.md): BOOK WALKER for Windows Ver.1.2.9 and earlier, BOOK WALKER for Mac Ver.1.2.5 and earlier allow an attacker to access local files via unspeci (no CVSS, BOOK WALKER Co. BOOK WALKER for Windows · BOOK WALKER Co. B…)
- [CVE-2017-10889](https://cve.now/CVE-2017-10889.md): TablePress prior to version 1.8.1 allows an attacker to conduct XML External Entity (XXE) attacks via unspecified vectors. (no CVSS, tablepress.org TablePress)
- [CVE-2017-10890](https://cve.now/CVE-2017-10890.md): Session management issue in RX-V200 firmware versions prior to 09.87.17.09, RX-V100 firmware versions prior to 03.29.17.09, RX-CLV1-P firmwa (no CVSS, Sharp RX-V200 firmware · Sharp RX-V100 firmware +3)
- [CVE-2017-4927](https://cve.now/CVE-2017-4927.md): VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP network packets which (no CVSS, VMware vCenter Server)
- [CVE-2017-4928](https://cve.now/CVE-2017-4928.md): The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. (no CVSS, VMware vSphere Web Client)
- [CVE-2017-4929](https://cve.now/CVE-2017-4929.md): VMware NSX Edge (6.2.x before 6.2.9 and 6.3.x before 6.3.5) contains a moderate Cross-Site Scripting (XSS) issue which may lead to informati (no CVSS, VMware NSX Edge)
- [CVE-2017-4934](https://cve.now/CVE-2017-4934.md): VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. (no CVSS, VMware Workstation · VMware Fusion)
- [CVE-2017-4935](https://cve.now/CVE-2017-4935.md): VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds write vulnerability (no CVSS, VMware Workstation · VMware Horizon View Client for Windows)
- [CVE-2017-4936](https://cve.now/CVE-2017-4936.md): VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability i (no CVSS, VMware Workstation · VMware Horizon View Client for Windows)
- [CVE-2017-4937](https://cve.now/CVE-2017-4937.md): VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability i (no CVSS, VMware Workstation · VMware Horizon View Client for Windows)
- [CVE-2017-4938](https://cve.now/CVE-2017-4938.md): VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. (no CVSS, VMware Workstation · VMware Fusion)
- [CVE-2017-16868](https://cve.now/CVE-2017-16868.md): In SWFTools 0.9.2, the wav\_convert2mono function in lib/wav.c does not properly restrict a multiplication within a malloc call, which allows (no CVSS)
- [CVE-2017-16869](https://cve.now/CVE-2017-16869.md): p\_mach.cpp in UPX 3.94 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have u (no CVSS)
- [CVE-2017-16870](https://cve.now/CVE-2017-16870.md): The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraft\_ajax\_handler function in /wp-content/plugins/updraftplus/admin. (no CVSS)
- [CVE-2017-16871](https://cve.now/CVE-2017-16871.md): The UpdraftPlus plugin through 1.13.12 for WordPress allows remote PHP code execution because the plupload\_action function in /wp-content/pl (no CVSS)
- [CVE-2017-16872](https://cve.now/CVE-2017-16872.md): An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. (no CVSS)
- [CVE-2017-1000125](https://cve.now/CVE-2017-1000125.md): Codiad(full version) is vulnerable to write anything to configure file in the installation resulting upload a webshell. (no CVSS)
- [CVE-2017-1000129](https://cve.now/CVE-2017-1000129.md): Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information disclosure (no CVSS)
- [CVE-2017-1000160](https://cve.now/CVE-2017-1000160.md): EllisLab ExpressionEngine 3.4.2 is vulnerable to cross-site scripting resulting in PHP code injection (no CVSS)
- [CVE-2017-1000164](https://cve.now/CVE-2017-1000164.md): Tine 2.0 version 2017.02.4 is vulnerable to XSS in the Addressbook resulting code execution and privilege escalation (no CVSS)
- [CVE-2017-1000223](https://cve.now/CVE-2017-1000223.md): A stored web content injection vulnerability (WCI, a.k.a XSS) is present in MODX Revolution CMS version 2.5.6 and earlier. (no CVSS)
- [CVE-2017-1000225](https://cve.now/CVE-2017-1000225.md): Reflected XSS in Relevanssi Premium version 1.14.8 when using relevanssi\_didyoumean() could allow unauthenticated attacker to do almost anyt (no CVSS)
- [CVE-2017-1000226](https://cve.now/CVE-2017-1000226.md): Stop User Enumeration 1.3.8 allows user enumeration via the REST API (no CVSS)
- [CVE-2017-1000229](https://cve.now/CVE-2017-1000229.md): Integer overflow bug in function minitiff\_read\_info() of optipng 0.7.6 allows an attacker to remotely execute code or cause denial of servic (no CVSS)
- [CVE-2017-1000231](https://cve.now/CVE-2017-1000231.md): A double-free vulnerability in parse.c in ldns 1.7.0 have unspecified impact and attack vectors. (no CVSS)
- [CVE-2017-1000232](https://cve.now/CVE-2017-1000232.md): A double-free vulnerability in str2host.c in ldns 1.7.0 have unspecified impact and attack vectors. (no CVSS)
- [CVE-2017-1000234](https://cve.now/CVE-2017-1000234.md): I, Librarian version \<=4.6 & 4.7 is vulnerable to Directory Enumeration in the jqueryFileTree.php resulting in attacker enumerating director (no CVSS)
- [CVE-2017-1000235](https://cve.now/CVE-2017-1000235.md): I, Librarian version \<=4.6 & 4.7 is vulnerable to OS Command Injection in batchimport.php resulting the web server being fully compromised. (no CVSS)
- [CVE-2017-1000236](https://cve.now/CVE-2017-1000236.md): I, Librarian version \<=4.6 & 4.7 is vulnerable to Reflected Cross-Site Scripting in the temp.php resulting in an attacker being able to inje (no CVSS)
- [CVE-2017-1000237](https://cve.now/CVE-2017-1000237.md): I, Librarian version \<=4.6 & 4.7 is vulnerable to Server-Side Request Forgery in the ajaxsupplement.php resulting in the attacker being able (no CVSS)
- [CVE-2017-1000246](https://cve.now/CVE-2017-1000246.md): Python package pysaml2 version 4.4.0 and earlier reuses the initialization vector across encryptions in the IDP server, resulting in weak en (no CVSS, pysaml2)
- [CVE-2017-1000247](https://cve.now/CVE-2017-1000247.md): British Columbia Institute of Technology CodeIgniter 3.1.3 is vulnerable to HTTP Header Injection in the set\_status\_header() common function (no CVSS, codeigniter4/framework)
- [CVE-2017-1000248](https://cve.now/CVE-2017-1000248.md): Redis-store \<=v1.3.0 allows unsafe objects to be loaded from redis (no CVSS, redis-store)
- [CVE-2017-1000172](https://cve.now/CVE-2017-1000172.md): Creolabs Gravity Version: 1.0 Use-After-Free Possible code execution. (no CVSS)
- [CVE-2017-1000173](https://cve.now/CVE-2017-1000173.md): Creolabs Gravity Version: 1.0 Heap Overflow Potential Code Execution. (no CVSS)
- [CVE-2017-1000188](https://cve.now/CVE-2017-1000188.md): nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile() resulting in code injection (no CVSS, ejs)
- [CVE-2017-1000189](https://cve.now/CVE-2017-1000189.md): nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile() (no CVSS, ejs)
- [CVE-2017-1000228](https://cve.now/CVE-2017-1000228.md): nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile() function (no CVSS, ejs)
- [CVE-2017-1000238](https://cve.now/CVE-2017-1000238.md): InvoicePlane version 1.4.10 is vulnerable to a Arbitrary File Upload resulting in an authenticated user can upload a malicious file to the w (no CVSS)
- [CVE-2017-1000239](https://cve.now/CVE-2017-1000239.md): InvoicePlane version 1.4.10 is vulnerable to a Stored Cross Site Scripting resulting in allowing an authenticated user to inject malicious c (no CVSS)
- [CVE-2017-1000240](https://cve.now/CVE-2017-1000240.md): The application OpenEMR is affected by multiple reflected & stored Cross-Site Scripting (XSS) vulnerabilities affecting version 5.0.0 and pr (no CVSS)
- [CVE-2017-1000241](https://cve.now/CVE-2017-1000241.md): The application OpenEMR version 5.0.0, 5.0.1-dev and prior is affected by vertical privilege escalation vulnerability. (no CVSS)
- [CVE-2017-1000193](https://cve.now/CVE-2017-1000193.md): October CMS build 412 is vulnerable to stored WCI (a.k.a XSS) in brand logo image name resulting in JavaScript code execution in the victim' (no CVSS, october/october)
- [CVE-2017-1000194](https://cve.now/CVE-2017-1000194.md): October CMS build 412 is vulnerable to Apache configuration modification via file upload functionality resulting in site compromise and poss (no CVSS, october/october)
- [CVE-2017-1000195](https://cve.now/CVE-2017-1000195.md): October CMS build 412 is vulnerable to PHP object injection in asset move functionality resulting in ability to delete files limited by file (no CVSS)
- [CVE-2017-1000196](https://cve.now/CVE-2017-1000196.md): October CMS build 412 is vulnerable to PHP code execution in the asset manager functionality resulting in site compromise and possibly other (no CVSS)
- [CVE-2017-1000197](https://cve.now/CVE-2017-1000197.md): October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on (no CVSS)
- [CVE-2017-1000198](https://cve.now/CVE-2017-1000198.md): tcmu-runner daemon version 0.9.0 to 1.2.0 is vulnerable to invalid memory references in the handler\_glfs.so handler resulting in denial of s (no CVSS)
- [CVE-2017-1000199](https://cve.now/CVE-2017-1000199.md): tcmu-runner version 0.91 up to 1.20 is vulnerable to information disclosure in handler\_qcow.so resulting in non-privileged users being able (no CVSS)
- [CVE-2017-1000200](https://cve.now/CVE-2017-1000200.md): tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a dbus triggered NULL pointer dereference in the tcmu-runner daemon's on\_unregister\_hand (no CVSS)
- [CVE-2017-1000201](https://cve.now/CVE-2017-1000201.md): The tcmu-runner daemon in tcmu-runner version 1.0.5 to 1.2.0 is vulnerable to a local denial of service attack (no CVSS)
- [CVE-2017-1000208](https://cve.now/CVE-2017-1000208.md): A vulnerability in Swagger-Parser's (version \<= 1.0.30) yaml parsing functionality results in arbitrary code being executed when a malicious (no CVSS, io.swagger:swagger-codegen · io.swagger:swagger-parser)
- [CVE-2017-1000209](https://cve.now/CVE-2017-1000209.md): The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (C (no CVSS, com.neovisionaries:nv-websocket-client)
- [CVE-2017-1000174](https://cve.now/CVE-2017-1000174.md): In SWFTools, an address access exception was found in swfdump swf\_GetBits(). (no CVSS)
- [CVE-2017-1000176](https://cve.now/CVE-2017-1000176.md): In SWFTools, a memcpy buffer overflow was found in swfc. (no CVSS)
- [CVE-2017-1000182](https://cve.now/CVE-2017-1000182.md): In SWFTools, a memory leak was found in wav2swf. (no CVSS)
- [CVE-2017-1000185](https://cve.now/CVE-2017-1000185.md): In SWFTools, a memcpy buffer overflow was found in gif2swf. (no CVSS)
- [CVE-2017-1000186](https://cve.now/CVE-2017-1000186.md): In SWFTools, a stack overflow was found in pdf2swf. (no CVSS)
- [CVE-2017-1000187](https://cve.now/CVE-2017-1000187.md): In SWFTools, an address access exception was found in pdf2swf. (no CVSS)
- [CVE-2017-1000210](https://cve.now/CVE-2017-1000210.md): picoTCP (versions 1.7.0 - 1.5.0) is vulnerable to stack buffer overflow resulting in code execution or denial of service attack (no CVSS)
- [CVE-2017-1000213](https://cve.now/CVE-2017-1000213.md): WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools/tool.php?tool=user\_search (no CVSS)
- [CVE-2017-1000220](https://cve.now/CVE-2017-1000220.md): soyuka/pidusage \<=1.1.4 is vulnerable to command injection in the module resulting in arbitrary command execution (no CVSS, pidusage)
- [CVE-2017-1000158](https://cve.now/CVE-2017-1000158.md): CPython (aka Python) up to 2.7.13 is vulnerable to an integer overflow in the PyString\_DecodeEscape function in stringobject.c, resulting in (no CVSS)
- [CVE-2017-1000218](https://cve.now/CVE-2017-1000218.md): LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code exec (no CVSS)
- [CVE-2017-1000219](https://cve.now/CVE-2017-1000219.md): npm/KyleRoss windows-cpu all versions vulnerable to command injection resulting in code execution as Node.js user (no CVSS, windows-cpu)
- [CVE-2017-1000224](https://cve.now/CVE-2017-1000224.md): CSRF in YouTube (WordPress plugin) could allow unauthenticated attacker to change any setting within the plugin (no CVSS)
- [CVE-2017-15517](https://cve.now/CVE-2017-15517.md): AltaVault OST Plug-in versions prior to 1.2.2 may allow attackers to obtain sensitive information via unspecified vectors. (no CVSS, NetApp AltaVault OST Plug-in)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-11-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.