# CVEs published 2017-11-20 26 CVEs were published on November 20, 2017: 0 critical, 6 high. Days are UTC. - [CVE-2017-12110](https://cve.now/CVE-2017-12110.md): An exploitable integer overflow vulnerability exists in the xls\_appendSST function of libxls 1.4.A specially crafted XLS file can cause memo (CVSS 8.8, libxls) - [CVE-2017-12111](https://cve.now/CVE-2017-12111.md): An exploitable out-of-bounds vulnerability exists in the xls\_addCell function of libxls 1.4. (CVSS 8.8, libxls) - [CVE-2017-2896](https://cve.now/CVE-2017-2896.md): An exploitable out-of-bounds write vulnerability exists in the xls\_mergedCells function of libxls 1.4. (CVSS 8.8, libxls) - [CVE-2017-2897](https://cve.now/CVE-2017-2897.md): An exploitable out-of-bounds write vulnerability exists in the read\_MSAT function of libxls 1.4. (CVSS 8.8, libxls) - [CVE-2017-2919](https://cve.now/CVE-2017-2919.md): An exploitable stack based buffer overflow vulnerability exists in the xls\_getfcell function of libxls 1.3.4. (CVSS 8.8, libxls) - [CVE-2017-12608](https://cve.now/CVE-2017-12608.md): A vulnerability in Apache OpenOffice Writer DOC file parser before 4.1.4, and specifically in ImportOldFormatStyles, allows attackers to cra (no CVSS, Apache Software Foundation Apache OpenOffice) - [CVE-2017-16906](https://cve.now/CVE-2017-16906.md): In Horde Groupware 5.2.19-5.2.22, there is XSS via the URL field in a "Calendar -\> New Event" action. (no CVSS) - [CVE-2017-16907](https://cve.now/CVE-2017-16907.md): In Horde Groupware 5.2.19 and 5.2.21, there is XSS via the Color field in a Create Task List action. (no CVSS) - [CVE-2017-16908](https://cve.now/CVE-2017-16908.md): In Horde Groupware 5.2.19, there is XSS via the Name field during creation of a new Resource. (no CVSS) - [CVE-2017-3157](https://cve.now/CVE-2017-3157.md): By exploiting the way Apache OpenOffice before 4.1.4 renders embedded objects, an attacker could craft a document that allows reading in a f (no CVSS, Apache Software Foundation Apache OpenOffice) - [CVE-2017-12607](https://cve.now/CVE-2017-12607.md): A vulnerability in OpenOffice's PPT file parser before 4.1.4, and specifically in PPTStyleSheet, allows attackers to craft malicious documen (no CVSS, Apache Software Foundation Apache OpenOffice) - [CVE-2017-15527](https://cve.now/CVE-2017-15527.md): Prior to ITMS 8.1 RU4, the Symantec Management Console can be susceptible to a directory traversal exploit, which is a type of attack that c (no CVSS, Symantec Management Console) - [CVE-2017-16903](https://cve.now/CVE-2017-16903.md): LvyeCMS through 3.1 allows remote attackers to upload and execute arbitrary PHP code via directory traversal sequences in the dir parameter, (no CVSS) - [CVE-2017-16904](https://cve.now/CVE-2017-16904.md): The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing (no CVSS) - [CVE-2017-16899](https://cve.now/CVE-2017-16899.md): An array index error in the fig2dev program in Xfig 3.2.6a allows remote attackers to cause a denial-of-service attack or information disclo (no CVSS) - [CVE-2017-16902](https://cve.now/CVE-2017-16902.md): On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to g (no CVSS) - [CVE-2017-16898](https://cve.now/CVE-2017-16898.md): The printMP3Headers function in util/listmp3.c in libming v0.4.8 or earlier is vulnerable to a global buffer overflow, which may allow attac (no CVSS) - [CVE-2017-9806](https://cve.now/CVE-2017-9806.md): A vulnerability in the OpenOffice Writer DOC file parser before 4.1.4, and specifically in the WW8Fonts Constructor, allows attackers to cra (no CVSS, Apache Software Foundation Apache OpenOffice) - [CVE-2017-16896](https://cve.now/CVE-2017-16896.md): A SQL injection in classes/handler/public.php in the forgotpass component of Tiny Tiny RSS 17.4 exists via the login parameter. (no CVSS) - [CVE-2016-6804](https://cve.now/CVE-2016-6804.md): The Apache OpenOffice installer (versions prior to 4.1.3, including some branded as OpenOffice.org) for Windows contains a defective operati (no CVSS, Apache Software Foundation Apache OpenOffice) - [CVE-2017-11400](https://cve.now/CVE-2017-11400.md): An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. (no CVSS) - [CVE-2017-11401](https://cve.now/CVE-2017-11401.md): An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. (no CVSS) - [CVE-2017-11402](https://cve.now/CVE-2017-11402.md): An issue has been discovered on the Belden Hirschmann Tofino Xenon Security Appliance before 03.2.00. (no CVSS) - [CVE-2017-16544](https://cve.now/CVE-2017-16544.md): In the add\_match function in libbb/lineedit.c in BusyBox through 1.27.2, the tab autocomplete feature of the shell, used to get a list of fi (CVSS 8.8) - [CVE-2017-15110](https://cve.now/CVE-2017-15110.md): In Moodle 3.x, students can find out email addresses of other students in the same course. (no CVSS, Moodle 3.x ยท moodle/moodle) - [CVE-2017-16894](https://cve.now/CVE-2017-16894.md): In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct re (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-11-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.