# CVEs published 2017-12-16

5 CVEs were published on December 16, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-17713](https://cve.now/CVE-2017-17713.md): Trape before 2017-11-05 has SQL injection via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /regis (no CVSS)
- [CVE-2017-17714](https://cve.now/CVE-2017-17714.md): Trape before 2017-11-05 has XSS via the /nr red parameter, the /nr vId parameter, the /register User-Agent HTTP header, the /register countr (no CVSS)
- [CVE-2017-14134](https://cve.now/CVE-2017-14134.md): A Reflected XSS Vulnerability affects the forgotten password page of Maplesoft Maple T.A. (no CVSS)
- [CVE-2017-17715](https://cve.now/CVE-2017-17715.md): The saveFile method in MediaController.java in the Telegram Messenger application before 2017-12-08 for Android allows directory traversal v (no CVSS)
- [CVE-2017-17712](https://cve.now/CVE-2017-17712.md): The raw\_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet-\>hdrincl that leads to uninitia (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-12-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.