CVEs published November 24, 2017
7 CVEs were published on November 24, 2017: 0 critical, 0 high.
- Published
- 7
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 7
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 7
- CVE-2017-16939The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to gain privileges or caus
- CVE-2017-16934The web server on DBL DBLTek devices allows remote attackers to execute arbitrary OS commands by obtaining the admin password via a frame.ht
- CVE-2017-16935Ametys before 4.0.3 requires authentication only for URIs containing a /cms/ substring, which allows remote attackers to bypass intended acc
- CVE-2017-16936Directory Traversal vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_kf_V15.03.05.19(631
- CVE-2017-16938A global buffer overflow in OptiPNG 0.7.6 allows remote attackers to cause a denial-of-service attack or other unspecified impact with a mal
- CVE-2016-10700auth_login.php in Cacti before 1.0.0 allows remote authenticated users who use web authentication to bypass intended access restrictions by
- CVE-2017-16933etc/initsystem/prepare-dirs in Icinga 2.x through 2.8.1 has a chown call for a filename in a user-writable directory, which allows local use