CVEs published November 29, 2017
16 CVEs were published on November 29, 2017: 2 critical, 1 high.
- Published
- 16
- Critical
- 2
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 13
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- curl and libcurl before
- 3
- Atlassian Fisheye and Crucible
- 1
- aubio
- 1
- Fortinet FortiOS
- 1
- Fortinet FortiWebManager
- 1
- macOS High Sierra
- 1
- RSA Authentication Agent for Web for Apache Web Server RSA…
- 1
- RSA Authentication Agent SDK RSA Authentication Agent API 8…
- 1
Critical 2
- CVE-2017-8816The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denial of service (integercurl and libcurl before
- CVE-2017-8817The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-of-bounds read and appcurl and libcurl before
High 1
Medium, low and unrated 13
- CVE-2017-14591Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to argument injection through filenames in MercuriaAtlassian Fisheye and Crucible
- CVE-2017-14186A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions under SSL VPN web portFortinet FortiOS
- CVE-2017-14189An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webUI to successfully logFortinet FortiWebManager
- CVE-2017-14377EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Server version 8.0.1 prRSA Authentication Agent for Web for Apache Web Server RSA…
- CVE-2017-14378EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authentication, aka an "ErroRSA Authentication Agent SDK RSA Authentication Agent API 8…
- CVE-2017-8818curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access and application crash)curl and libcurl before
- CVE-2017-13872An issue was discovered in certain Apple products.macOS High Sierra
- CVE-2017-17059XSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-thumb-post) plugin 8.1.3 for WordPress via the query string to
- CVE-2017-17054In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when plaaubio
- CVE-2017-17049TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified
- CVE-2017-17050TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possibly have unspecified
- CVE-2017-17052The mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the ->exe_file member of a new process's mm_struct,
- CVE-2017-17053The init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4.12.10 does not correctly handle errors from