CVEs published November 30, 2017
58 CVEs were published on November 30, 2017: 0 critical, 0 high.
- Published
- 58
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 58
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- Cisco NX-OS
- 10
- Cisco WebEx Recording Format and Advanced Recording Format…
- 6
- Cisco Data Center Network Manager Software
- 5
- Cisco Jabber
- 3
- Cisco Nexus Series Switches
- 2
- Cisco UCS Central Software
- 2
- Cisco WebEx Meeting Center
- 2
- Cisco WebEx Network Recording Player
- 2
- Apache Software Foundation Apache CXF Fediz · org.apache… +2
- 1
- Cisco Application Policy Infrastructure Controller
- 1
Medium, low and unrated 58
- CVE-2017-1000405The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside the THP implementat
- CVE-2017-1000406OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cacheorg.opendaylight.integration:distribution-karaf
- CVE-2017-17080elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate sizes of core notes
- CVE-2017-17081The gmc_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remo
- CVE-2017-3764A vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA user account names may be exposed to unauthenLenovo Group xClarity Administrator
- CVE-2017-14868Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a RESTorg.restlet.jse:org.restlet.ext.jaxrs
- CVE-2017-14949Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE aorg.restlet.jse:org.restlet
- CVE-2017-15116The rngapi_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer dereferLinux kernel
- CVE-2017-17065An issue was discovered on D-Link DIR-605L Model B before FW2.11betaB06_hbrf devices, related to the code that handles the authentication va
- CVE-2017-12631Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications.Apache Software Foundation Apache CXF Fediz · org.apache… +2
- CVE-2017-12297A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka Cisco WebEx Meeting Center
- CVE-2017-12328A vulnerability in Session Initiation Protocol (SIP) call handling in Cisco IP Phone 8800 Series devices could allow an unauthenticated, remCisco IP Phone 8800 Series
- CVE-2017-12329A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenticated, locCisco FXOS and NX-OS
- CVE-2017-12330A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attackCisco Nexus Series Switches
- CVE-2017-12331A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a Cisco NX-OS
- CVE-2017-12332A vulnerability in Cisco NX-OS System Software patch installation could allow an authenticated, local attacker to write a file to arbitrary Cisco NX-OS
- CVE-2017-12333A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a Cisco NX-OS
- CVE-2017-12334A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attackCisco NX-OS
- CVE-2017-12335A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attackCisco NX-OS
- CVE-2017-12336A vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software could allow an authenticated, local attacker to escape the intCisco NX-OS
- CVE-2017-12338A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary filCisco NX-OS
- CVE-2017-12339A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attackCisco NX-OS
- CVE-2017-12340A vulnerability in Cisco NX-OS System Software running on Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and CiscCisco Multilayer Director, Nexus 7000 Series, and Nexus 770…
- CVE-2017-12341A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attackCisco NX-OS
- CVE-2017-12342A vulnerability in the Open Agent Container (OAC) feature of Cisco Nexus Series Switches could allow an unauthenticated, local attacker to rCisco Nexus Series Switches
- CVE-2017-12343Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into Cisco Data Center Network Manager Software
- CVE-2017-12344Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into Cisco Data Center Network Manager Software
- CVE-2017-12345Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into Cisco Data Center Network Manager Software
- CVE-2017-12346Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into Cisco Data Center Network Manager Software
- CVE-2017-12347Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into Cisco Data Center Network Manager Software
- CVE-2017-12348Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a crosCisco UCS Central Software
- CVE-2017-12349Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a crosCisco UCS Central Software
- CVE-2017-12351A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an authenticated, local attacker to read and send packCisco NX-OS
- CVE-2017-12352A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could Cisco Application Policy Infrastructure Controller
- CVE-2017-12353A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (ECisco Email Security Appliance
- CVE-2017-12354A vulnerability in the web-based interface of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to viCisco Secure Access Control System
- CVE-2017-12355A vulnerability in the Local Packet Transport Services (LPTS) ingress frame-processing functionality of Cisco IOS XR Software could allow anCisco IOS XR
- CVE-2017-12356A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, remCisco Jabber
- CVE-2017-12357A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker Cisco Unified Communications Manager
- CVE-2017-12358A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an authenticated, remotCisco Jabber
- CVE-2017-12359A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files could allow an attacker tCisco WebEx Network Recording Player
- CVE-2017-12360A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format (WRF) files could allow an attacker to cause a denial of Cisco WebEx Network Recording Player
- CVE-2017-12361A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the JaCisco Jabber
- CVE-2017-12362A vulnerability in Cisco Meeting Server versions prior to 2.2.2 could allow an authenticated, remote attacker to cause the system to reload,Cisco Meeting Server
- CVE-2017-12363A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on Cisco WebEx Meeting Server
- CVE-2017-12364A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to executeCisco Prime Service Catalog
- CVE-2017-12365A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information.Cisco WebEx Event Center
- CVE-2017-12366A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attackCisco WebEx Meeting Center
- CVE-2017-12367A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced RecordiCisco WebEx Recording Format and Advanced Recording Format…
- CVE-2017-12368A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced RecCisco WebEx Recording Format and Advanced Recording Format…
- CVE-2017-12369A "Cisco WebEx Network Recording Player Out-of-Bounds Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording FCisco WebEx Recording Format and Advanced Recording Format…
- CVE-2017-12370A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced RecCisco WebEx Recording Format and Advanced Recording Format…
- CVE-2017-12371A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced RecCisco WebEx Recording Format and Advanced Recording Format…
- CVE-2017-12372A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced RecCisco WebEx Recording Format and Advanced Recording Format…
- CVE-2017-14196An issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3.
- CVE-2017-14197An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3.
- CVE-2017-14198An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3.
- CVE-2017-17067Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12,