Skip to content
OpenAdvisories

Archive

29 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /29 December 2017 →
  1. 133
  2. 223
  3. 333
  4. 417
  5. 54
  6. 629
  7. 744
  8. 821
  9. 933
  10. 1013
  11. 111
  12. 126
  13. 1397
  14. 1422
  15. 1591
  16. 16124
  17. 17100
  18. 184
  19. 191
  20. 2026
  21. 2119
  22. 22162
  23. 237
  24. 247
  25. 255
  26. 261
  27. 2755
  28. 2816
  29. 2916
  30. 3058
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2017-14591

    Atlassian Fisheye and Crucible versions less than 4.4.3 and version 4.5.0 are vulnerable to argument injection through …

    Atlassian Fisheye and Crucible
  • Unscored —
    CVE-2017-14186 Scanner template

    A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4 and below versions u…

    Fortinet FortiOS Network devices
  • Unscored —
    CVE-2017-14189

    An improper access control vulnerability in Fortinet FortiWebManager 5.8.0 allows anyone that can access the admin webU…

    Fortinet FortiWebManager Network devices
  • Critical 9.8
    CVE-2017-8816

    The NTLM authentication feature in curl and libcurl before 7.57.0 on 32-bit platforms allows attackers to cause a denia…

    curl curl curl Debian Ubuntu Alpine
  • Critical 9.8
    CVE-2017-8817 EPSS 11%

    The FTP wildcard function in curl and libcurl before 7.57.0 allows remote attackers to cause a denial of service (out-o…

    curl curl curl Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-8818

    curl and libcurl before 7.57.0 on 32-bit platforms allow attackers to cause a denial of service (out-of-bounds access a…

    curl curl Debian Alpine
  • Unscored —
    CVE-2017-14377

    EMC RSA Authentication Agent for Web: Apache Web Server version 8.0 and RSA Authentication Agent for Web: Apache Web Se…

  • Unscored —
    CVE-2017-14378

    EMC RSA Authentication Agent API 8.5 for C and RSA Authentication Agent SDK 8.6 for C allow attackers to bypass authent…

  • Unscored —
    CVE-2017-17059 Scanner template

    XSS exists in the amtyThumb amty-thumb-recent-post (aka amtyThumb posts or wp-thumb-post) plugin 8.1.3 for WordPress vi…

  • Unscored —
    CVE-2017-13872 Public exploit EPSS 37%

    An issue was discovered in certain Apple products. macOS High Sierra before Security Update 2017-001 is affected. The i…

    macOS
  • High 7.5
    CVE-2017-17058 Public exploit EPSS 24%

    The WooCommerce plugin through 3.x for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/wooc…

  • Medium 5.5
    CVE-2017-17054

    Aubio Divide-By-Zero DoS vulnerability in new_aubio_source_wavread function

    In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when playing a crafted audio file.

    aubio aubio aubio Debian Ubuntu PyPI
  • Unscored —
    CVE-2017-17049

    TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possi…

  • Unscored —
    CVE-2017-17052

    The mm_init function in kernel/fork.c in the Linux kernel before 4.12.10 does not clear the ->exe_file member of a new …

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2017-17053

    The init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4.12.10 does not correct…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2017-17050

    TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (NULL pointer dereference) or possi…