Archive
7 December 2017
Vulnerabilities first published on this day (UTC), newest first.
30 results · Feed
-
Unscored —
The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP comm…
-
Unscored —
The web user interface of Dell 2335dn and 2355dn Multifunction Laser Printers, firmware versions prior to V2.70.06.26 A…
-
Unscored —
http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to exe…
-
Critical 9.8
Mercurial vulnerable to arbitrary code injection
In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repository. Typical use of Mercurial prevents construction of s…
-
Unscored —CVE-2017-11937 EPSS 28%
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows…
-
Unscored —CVE-2017-3738 EPSS 13%
There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. N…
-
Unscored —CVE-2017-3737 EPSS 79%
OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal erro…
-
Unscored —
IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids o…
-
Unscored —
IBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to authenticated users that…
-
Unscored —
IBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of the victim. By persua…
-
Unscored —
IBM WebSphere MQ 7.5, 8.0, and 9.0 could allow an authenticated user to insert messages with a corrupt RFH header into …
-
Unscored —
IBM Sterling B2B Integrator Standard Edition 5.2 allows a user to view sensitive information that belongs to another us…
-
Unscored —
IBM Security Guardium 9.0, 9.1, and 9.5 supports interaction between multiple actors and allows those actors to negotia…
-
Unscored —
IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to…
-
Unscored —
IBM Connections 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip…
-
Unscored —
IBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to SQL injection. A remote attacker could send specially-cr…
-
Unscored —
IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing t…
-
Unscored —
IBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters. This may lead to informat…
-
Unscored —
IBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access to restricted data and …
-
Unscored —
IBM Atlas eDiscovery Process Management 6.0.3 could allow an authenticated attacker to obtain sensitive information whe…
-
Unscored —
IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users…
-
Unscored —
IBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to access an object which t…
-
Unscored —
Sangoma NetBorder / Vega Session Controller before 2.3.12-80-GA allows remote attackers to execute arbitrary commands v…
-
Unscored —
ISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a crafted cron job.
-
Unscored —
An issue was discovered in the software on Vaultek Gun Safe VT20i products. There is no encryption of the session betwe…
-
Unscored —CVE-2017-17451 Scanner template
The WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes parameter to view/subs…
-
Unscored —
net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callbac…
-
Unscored —
net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for…
-
Unscored —
An issue was discovered in the software on Vaultek Gun Safe VT20i products, aka BlueSteal. An attacker can remotely unl…
-
Unscored —
The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMO…