CVEs published November 21, 2017
19 CVEs were published on November 21, 2017: 0 critical, 0 high.
- Published
- 19
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 19
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Intel Active Management Technology
- 2
- Intel Manageability Engine
- 2
- Intel Server Platform Services
- 2
- Intel Trusted Execution Engine
- 2
- Intel Deep Learning Training Tool
- 1
- Intel Dual-Band Wireless-AC and Tri-Band Wireless-AC
- 1
- Red Hat ansible · ansible
- 1
- swauth
- 1
Medium, low and unrated 19
- CVE-2017-7550A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module.Red Hat ansible · ansible
- CVE-2015-3934Multiple SQL injection vulnerabilities in Fiyo CMS 2.0_1.9.1 allow remote attackers to execute arbitrary SQL commands via the (1) id paramet
- CVE-2017-16664Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5 before 5.0.24, 4 before 4.0.26, and 3.3 before 3.3
- CVE-2017-16923Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(6318_
- CVE-2017-5705Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access Intel Manageability Engine
- CVE-2017-5706Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to executeIntel Server Platform Services
- CVE-2017-5707Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to the system to executeIntel Trusted Execution Engine
- CVE-2017-5708Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process tIntel Manageability Engine
- CVE-2017-5709Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged conIntel Server Platform Services
- CVE-2017-5710Multiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0 allows unauthorized process to access privileged conIntel Trusted Execution Engine
- CVE-2017-5711Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.1Intel Active Management Technology
- CVE-2017-5712Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 alIntel Active Management Technology
- CVE-2017-5719A vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user.Intel Deep Learning Training Tool
- CVE-2017-5729Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames vIntel Dual-Band Wireless-AC and Tri-Band Wireless-AC
- CVE-2017-15044The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from
- CVE-2017-16613An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1.swauth
- CVE-2017-16920v5/config/system.php in dayrui FineCms 5.2.0 has a default SYS_KEY value and does not require key regeneration for each installation, which
- CVE-2017-16840The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-bounds read) because o
- CVE-2017-16919MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inj