# CVEs published 2017-11-30

58 CVEs were published on November 30, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-1000405](https://cve.now/CVE-2017-1000405.md): The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd\_mkdirty() in the touch\_pmd() function inside the THP implementat (no CVSS)
- [CVE-2017-1000406](https://cve.now/CVE-2017-1000406.md): OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache (no CVSS, org.opendaylight.integration:distribution-karaf)
- [CVE-2017-17080](https://cve.now/CVE-2017-17080.md): elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate sizes of core notes (no CVSS)
- [CVE-2017-17081](https://cve.now/CVE-2017-17081.md): The gmc\_mmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remo (no CVSS)
- [CVE-2017-3764](https://cve.now/CVE-2017-3764.md): A vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA user account names may be exposed to unauthen (no CVSS, Lenovo Group xClarity Administrator)
- [CVE-2017-14868](https://cve.now/CVE-2017-14868.md): Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST (no CVSS, org.restlet.jse:org.restlet.ext.jaxrs)
- [CVE-2017-14949](https://cve.now/CVE-2017-14949.md): Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE a (no CVSS, org.restlet.jse:org.restlet)
- [CVE-2017-15116](https://cve.now/CVE-2017-15116.md): The rngapi\_reset function in crypto/rng.c in the Linux kernel before 4.2 allows attackers to cause a denial of service (NULL pointer derefer (no CVSS, Linux kernel)
- [CVE-2017-17065](https://cve.now/CVE-2017-17065.md): An issue was discovered on D-Link DIR-605L Model B before FW2.11betaB06\_hbrf devices, related to the code that handles the authentication va (no CVSS)
- [CVE-2017-12631](https://cve.now/CVE-2017-12631.md): Apache CXF Fediz ships with a number of container-specific plugins to enable WS-Federation for applications. (no CVSS, Apache Software Foundation Apache CXF Fediz · org.apache… +2)
- [CVE-2017-12297](https://cve.now/CVE-2017-12297.md): A vulnerability in Cisco WebEx Meeting Center could allow an authenticated, remote attacker to initiate connections to arbitrary hosts, aka (no CVSS, Cisco WebEx Meeting Center)
- [CVE-2017-12328](https://cve.now/CVE-2017-12328.md): A vulnerability in Session Initiation Protocol (SIP) call handling in Cisco IP Phone 8800 Series devices could allow an unauthenticated, rem (no CVSS, Cisco IP Phone 8800 Series)
- [CVE-2017-12329](https://cve.now/CVE-2017-12329.md): A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenticated, loc (no CVSS, Cisco FXOS and NX-OS)
- [CVE-2017-12330](https://cve.now/CVE-2017-12330.md): A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack (no CVSS, Cisco Nexus Series Switches)
- [CVE-2017-12331](https://cve.now/CVE-2017-12331.md): A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a (no CVSS, Cisco NX-OS)
- [CVE-2017-12332](https://cve.now/CVE-2017-12332.md): A vulnerability in Cisco NX-OS System Software patch installation could allow an authenticated, local attacker to write a file to arbitrary (no CVSS, Cisco NX-OS)
- [CVE-2017-12333](https://cve.now/CVE-2017-12333.md): A vulnerability in Cisco NX-OS System Software could allow an authenticated, local attacker to bypass signature verification when loading a (no CVSS, Cisco NX-OS)
- [CVE-2017-12334](https://cve.now/CVE-2017-12334.md): A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack (no CVSS, Cisco NX-OS)
- [CVE-2017-12335](https://cve.now/CVE-2017-12335.md): A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack (no CVSS, Cisco NX-OS)
- [CVE-2017-12336](https://cve.now/CVE-2017-12336.md): A vulnerability in the TCL scripting subsystem of Cisco NX-OS System Software could allow an authenticated, local attacker to escape the int (no CVSS, Cisco NX-OS)
- [CVE-2017-12338](https://cve.now/CVE-2017-12338.md): A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to read the contents of arbitrary fil (no CVSS, Cisco NX-OS)
- [CVE-2017-12339](https://cve.now/CVE-2017-12339.md): A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack (no CVSS, Cisco NX-OS)
- [CVE-2017-12340](https://cve.now/CVE-2017-12340.md): A vulnerability in Cisco NX-OS System Software running on Cisco MDS Multilayer Director Switches, Cisco Nexus 7000 Series Switches, and Cisc (no CVSS, Cisco Multilayer Director, Nexus 7000 Series, and Nexus 770…)
- [CVE-2017-12341](https://cve.now/CVE-2017-12341.md): A vulnerability in the CLI of Cisco NX-OS System Software could allow an authenticated, local attacker to perform a command injection attack (no CVSS, Cisco NX-OS)
- [CVE-2017-12342](https://cve.now/CVE-2017-12342.md): A vulnerability in the Open Agent Container (OAC) feature of Cisco Nexus Series Switches could allow an unauthenticated, local attacker to r (no CVSS, Cisco Nexus Series Switches)
- [CVE-2017-12343](https://cve.now/CVE-2017-12343.md): Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into (no CVSS, Cisco Data Center Network Manager Software)
- [CVE-2017-12344](https://cve.now/CVE-2017-12344.md): Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into (no CVSS, Cisco Data Center Network Manager Software)
- [CVE-2017-12345](https://cve.now/CVE-2017-12345.md): Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into (no CVSS, Cisco Data Center Network Manager Software)
- [CVE-2017-12346](https://cve.now/CVE-2017-12346.md): Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into (no CVSS, Cisco Data Center Network Manager Software)
- [CVE-2017-12347](https://cve.now/CVE-2017-12347.md): Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) Software could allow a remote attacker to inject arbitrary values into (no CVSS, Cisco Data Center Network Manager Software)
- [CVE-2017-12348](https://cve.now/CVE-2017-12348.md): Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cros (no CVSS, Cisco UCS Central Software)
- [CVE-2017-12349](https://cve.now/CVE-2017-12349.md): Multiple vulnerabilities in the web-based management interface of Cisco UCS Central Software could allow a remote attacker to conduct a cros (no CVSS, Cisco UCS Central Software)
- [CVE-2017-12351](https://cve.now/CVE-2017-12351.md): A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an authenticated, local attacker to read and send pack (no CVSS, Cisco NX-OS)
- [CVE-2017-12352](https://cve.now/CVE-2017-12352.md): A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could (no CVSS, Cisco Application Policy Infrastructure Controller)
- [CVE-2017-12353](https://cve.now/CVE-2017-12353.md): A vulnerability in the Multipurpose Internet Mail Extensions (MIME) scanner of Cisco AsyncOS Software for Cisco Email Security Appliances (E (no CVSS, Cisco Email Security Appliance)
- [CVE-2017-12354](https://cve.now/CVE-2017-12354.md): A vulnerability in the web-based interface of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to vi (no CVSS, Cisco Secure Access Control System)
- [CVE-2017-12355](https://cve.now/CVE-2017-12355.md): A vulnerability in the Local Packet Transport Services (LPTS) ingress frame-processing functionality of Cisco IOS XR Software could allow an (no CVSS, Cisco IOS XR)
- [CVE-2017-12356](https://cve.now/CVE-2017-12356.md): A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an unauthenticated, rem (no CVSS, Cisco Jabber)
- [CVE-2017-12357](https://cve.now/CVE-2017-12357.md): A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker (no CVSS, Cisco Unified Communications Manager)
- [CVE-2017-12358](https://cve.now/CVE-2017-12358.md): A vulnerability in the web-based management interface of Cisco Jabber for Windows, Mac, Android, and iOS could allow an authenticated, remot (no CVSS, Cisco Jabber)
- [CVE-2017-12359](https://cve.now/CVE-2017-12359.md): A Buffer Overflow vulnerability in Cisco WebEx Network Recording Player for Advanced Recording Format (.arf) files could allow an attacker t (no CVSS, Cisco WebEx Network Recording Player)
- [CVE-2017-12360](https://cve.now/CVE-2017-12360.md): A vulnerability in Cisco WebEx Network Recording Player for WebEx Recording Format (WRF) files could allow an attacker to cause a denial of (no CVSS, Cisco WebEx Network Recording Player)
- [CVE-2017-12361](https://cve.now/CVE-2017-12361.md): A vulnerability in Cisco Jabber for Windows could allow an unauthenticated, local attacker to access sensitive communications made by the Ja (no CVSS, Cisco Jabber)
- [CVE-2017-12362](https://cve.now/CVE-2017-12362.md): A vulnerability in Cisco Meeting Server versions prior to 2.2.2 could allow an authenticated, remote attacker to cause the system to reload, (no CVSS, Cisco Meeting Server)
- [CVE-2017-12363](https://cve.now/CVE-2017-12363.md): A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome message of a meeting on (no CVSS, Cisco WebEx Meeting Server)
- [CVE-2017-12364](https://cve.now/CVE-2017-12364.md): A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute (no CVSS, Cisco Prime Service Catalog)
- [CVE-2017-12365](https://cve.now/CVE-2017-12365.md): A vulnerability in Cisco WebEx Event Center could allow an authenticated, remote attacker to view unlisted meeting information. (no CVSS, Cisco WebEx Event Center)
- [CVE-2017-12366](https://cve.now/CVE-2017-12366.md): A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack (no CVSS, Cisco WebEx Meeting Center)
- [CVE-2017-12367](https://cve.now/CVE-2017-12367.md): A "Cisco WebEx Network Recording Player Denial of Service Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recordi (no CVSS, Cisco WebEx Recording Format and Advanced Recording Format…)
- [CVE-2017-12368](https://cve.now/CVE-2017-12368.md): A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Rec (no CVSS, Cisco WebEx Recording Format and Advanced Recording Format…)
- [CVE-2017-12369](https://cve.now/CVE-2017-12369.md): A "Cisco WebEx Network Recording Player Out-of-Bounds Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Recording F (no CVSS, Cisco WebEx Recording Format and Advanced Recording Format…)
- [CVE-2017-12370](https://cve.now/CVE-2017-12370.md): A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Rec (no CVSS, Cisco WebEx Recording Format and Advanced Recording Format…)
- [CVE-2017-12371](https://cve.now/CVE-2017-12371.md): A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Rec (no CVSS, Cisco WebEx Recording Format and Advanced Recording Format…)
- [CVE-2017-12372](https://cve.now/CVE-2017-12372.md): A "Cisco WebEx Network Recording Player Remote Code Execution Vulnerability" exists in Cisco WebEx Network Recording Player for Advanced Rec (no CVSS, Cisco WebEx Recording Format and Advanced Recording Format…)
- [CVE-2017-14196](https://cve.now/CVE-2017-14196.md): An issue was discovered in Squiz Matrix from 5.3 through to 5.3.6.1 and 5.4.1.3. (no CVSS)
- [CVE-2017-14197](https://cve.now/CVE-2017-14197.md): An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. (no CVSS)
- [CVE-2017-14198](https://cve.now/CVE-2017-14198.md): An issue was discovered in Squiz Matrix before 5.3.6.1 and 5.4.x before 5.4.1.3. (no CVSS)
- [CVE-2017-17067](https://cve.now/CVE-2017-17067.md): Splunk Web in Splunk Enterprise 7.0.x before 7.0.0.1, 6.6.x before 6.6.3.2, 6.5.x before 6.5.6, 6.4.x before 6.4.9, and 6.3.x before 6.3.12, (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-11-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.