# CVEs published 2017-11-21 19 CVEs were published on November 21, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-7550](https://cve.now/CVE-2017-7550.md): A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins\_plugin module. (no CVSS, Red Hat ansible ยท ansible) - [CVE-2015-3934](https://cve.now/CVE-2015-3934.md): Multiple SQL injection vulnerabilities in Fiyo CMS 2.0\_1.9.1 allow remote attackers to execute arbitrary SQL commands via the (1) id paramet (no CVSS) - [CVE-2017-16664](https://cve.now/CVE-2017-16664.md): Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5 before 5.0.24, 4 before 4.0.26, and 3.3 before 3.3 (no CVSS) - [CVE-2017-16923](https://cve.now/CVE-2017-16923.md): Command Injection vulnerability in app\_data\_center on Shenzhen Tenda Ac9 US\_AC9V1.0BR\_V15.03.05.14\_multi\_TD01, Ac9 ac9\_kf\_V15.03.05.19(6318\_ (no CVSS) - [CVE-2017-5705](https://cve.now/CVE-2017-5705.md): Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attacker with local access (no CVSS, Intel Manageability Engine) - [CVE-2017-5706](https://cve.now/CVE-2017-5706.md): Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to the system to execute (no CVSS, Intel Server Platform Services) - [CVE-2017-5707](https://cve.now/CVE-2017-5707.md): Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to the system to execute (no CVSS, Intel Trusted Execution Engine) - [CVE-2017-5708](https://cve.now/CVE-2017-5708.md): Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow unauthorized process t (no CVSS, Intel Manageability Engine) - [CVE-2017-5709](https://cve.now/CVE-2017-5709.md): Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged con (no CVSS, Intel Server Platform Services) - [CVE-2017-5710](https://cve.now/CVE-2017-5710.md): Multiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0 allows unauthorized process to access privileged con (no CVSS, Intel Trusted Execution Engine) - [CVE-2017-5711](https://cve.now/CVE-2017-5711.md): Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.1 (no CVSS, Intel Active Management Technology) - [CVE-2017-5712](https://cve.now/CVE-2017-5712.md): Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.6/11.7/11.10/11.20 al (no CVSS, Intel Active Management Technology) - [CVE-2017-5719](https://cve.now/CVE-2017-5719.md): A vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a local user. (no CVSS, Intel Deep Learning Training Tool) - [CVE-2017-5729](https://cve.now/CVE-2017-5729.md): Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attacker to replay frames v (no CVSS, Intel Dual-Band Wireless-AC and Tri-Band Wireless-AC) - [CVE-2017-15044](https://cve.now/CVE-2017-15044.md): The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download searchable text from (no CVSS) - [CVE-2017-16613](https://cve.now/CVE-2017-16613.md): An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. (no CVSS, swauth) - [CVE-2017-16920](https://cve.now/CVE-2017-16920.md): v5/config/system.php in dayrui FineCms 5.2.0 has a default SYS\_KEY value and does not require key regeneration for each installation, which (no CVSS) - [CVE-2017-16840](https://cve.now/CVE-2017-16840.md): The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-bounds read) because o (no CVSS) - [CVE-2017-16919](https://cve.now/CVE-2017-16919.md): MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows remote attackers to inj (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-11-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.