Skip to content
OpenAdvisories

Archive

1 December 2017

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2017-16953 Public exploit EPSS 11%

    connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to m…

  • Unscored —
    CVE-2017-16895 Public exploit

    The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helpe…

  • Unscored —
    CVE-2017-15357 Public exploit

    The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges …

  • Unscored —
    CVE-2017-11282 Public exploit EPSS 34%

    Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation c…

  • Unscored —
    CVE-2017-11281 Public exploit EPSS 33%

    Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploit…

  • Unscored —
    CVE-2017-17085 Public exploit EPSS 17%

    In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/disse…