CVEs published November 28, 2017
16 CVEs were published on November 28, 2017: 0 critical, 0 high.
- Published
- 16
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 16
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- EMC ScaleIO EMC ScaleIO 2.0.1.x
- 3
- Cloud Foundry capi-release: All versions prior to 1.45.0, c…
- 1
- Dahua Technologies Dahua IP Camera and IP PTZ IPC-HFW1XXX,…
- 1
- RSA Authentication Manager software
- 1
- yard
- 1
Medium, low and unrated 16
- CVE-2017-17044An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to cause a denial of service (infinite loop and host OS hang) by le
- CVE-2017-17045An issue was discovered in Xen through 4.9.x allowing HVM guest OS users to gain privileges on the host OS, obtain sensitive information, or
- CVE-2017-17046An issue was discovered in Xen through 4.9.x on the ARM platform allowing guest OS users to obtain sensitive information from DRAM after a r
- CVE-2017-17043The Emag Marketplace Connector plugin 1.0.0 for WordPress has reflected XSS because the parameter "post" to /wp-content/plugins/emag-marketp
- CVE-2017-17042lib/yard/core_ext/file.rb in the server in YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attacyard
- CVE-2017-9315Customer of Dahua IP camera or IP PTZ could submit relevant device information to receive a time limited temporary password from Dahua authoDahua Technologies Dahua IP Camera and IP PTZ IPC-HFW1XXX,…
- CVE-2017-15673The files function in the administration section in CS-Cart 4.6.2 and earlier allows attackers to execute arbitrary PHP code via vectors inv
- CVE-2017-16951Winamp Pro 5.66 Build 3512 allows remote attackers to cause a denial of service via a crafted WAV, WMV, AU, ASF, AIFF, or AIF file.
- CVE-2017-16952KMPlayer 4.2.2.4 allows remote attackers to cause a denial of service via a crafted NSV file.
- CVE-2016-10702Pebble Smartwatch devices through 4.3 mishandle UUID storage, which allows attackers to read an arbitrary application's flash storage, and a
- CVE-2017-14379EMC RSA Authentication Manager before 8.2 SP1 P6 has a cross-site scripting vulnerability that could potentially be exploited by malicious uRSA Authentication Manager software
- CVE-2017-14389An issue was discovered in Cloud Foundry Foundation capi-release (all versions prior to 1.45.0), cf-release (all versions prior to v280), anCloud Foundry capi-release: All versions prior to 1.45.0, c…
- CVE-2017-8001An issue was discovered in EMC ScaleIO 2.0.1.x.EMC ScaleIO EMC ScaleIO 2.0.1.x
- CVE-2017-8019An issue was discovered in EMC ScaleIO 2.0.1.x.EMC ScaleIO EMC ScaleIO 2.0.1.x
- CVE-2017-8020An issue was discovered in EMC ScaleIO 2.0.1.x.EMC ScaleIO EMC ScaleIO 2.0.1.x
- CVE-2016-10701In Hitachi Vantara Pentaho BA Platform through 8.0, a CSRF issue exists in the Business Analytics application.