Skip to content
OpenAdvisories

Archive

6 December 2017

Vulnerabilities first published on this day (UTC), newest first.

← November 2017 2017 / December /6 January 2018 →
  1. 141
  2. 26
  3. 38
  4. 422
  5. 560
  6. 657
  7. 730
  8. 830
  9. 986
  10. 103
  11. 1152
  12. 1258
  13. 13104
  14. 1435
  15. 1536
  16. 165
  17. 174
  18. 1831
  19. 1913
  20. 20134
  21. 2151
  22. 2235
  23. 2316
  24. 2428
  25. 2540
  26. 2619
  27. 2723
  28. 2826
  29. 2926
  30. 3024
  31. 314
All Critical High Medium Low Exploited only Public exploit

57 results · Feed

  • Unscored —
    CVE-2017-13166

    An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. An…

    Google Android linux-raspi2 linux-hwe Android Debian Ubuntu
  • Unscored —
    CVE-2017-13156 Public exploit EPSS 20%

    An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0…

    Google Android Android
  • Unscored —
    CVE-2017-13161

    An elevation of privilege vulnerability in the Broadcom wireless driver. Product: Android. Versions: Android kernel. An…

    Google Android Android
  • Unscored —
    CVE-2017-13149

    An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7…

    Google Android Android
  • Unscored —
    CVE-2017-13154

    An elevation of privilege vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 5.…

    Google Android Android
  • Unscored —
    CVE-2017-13170

    An elevation of privilege vulnerability in the MediaTek display driver. Product: Android. Versions: Android kernel. And…

    Google Android Android
  • Unscored —
    CVE-2017-13172

    An elevation of privilege vulnerability in the MediaTek bluetooth driver. Product: Android. Versions: Android kernel. A…

    Google Android Android
  • Unscored —
    CVE-2017-13171

    An elevation of privilege vulnerability in the MediaTek performance service. Product: Android. Versions: Android kernel…

    Google Android Android
  • Unscored —
    CVE-2017-13169

    An information disclosure vulnerability in the kernel camera server. Product: Android. Versions: Android kernel. Androi…

    Google Android Android
  • Unscored —
    CVE-2017-13157

    An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1…

    Google Android Android
  • Unscored —
    CVE-2017-13159

    An information disclosure vulnerability in the Android system (activitymanagerservice). Product: Android. Versions: 5.1…

    Google Android Android
  • Medium 4.7
    CVE-2017-17383

    Cross-site Scripting in Jenkins Core

    Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624.

    org.jenkins-ci.main:jenkins-core Maven
  • Unscored —
    CVE-2017-17069

    ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if A…

  • Unscored —
    CVE-2017-17433

    The recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds w…

    rsync rsync rsync Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-17434

    The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemon…

    rsync rsync rsync Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-17432

    OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote attackers to cause a denial of…

    openafs openafs Debian Ubuntu
  • Unscored —
    CVE-2017-14374

    The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 (aka 2016 R3.20) is protected using a hard-code…