Archive

8 December 2017

Vulnerabilities first published on this day (UTC), newest first.

← November 2017 2017 / December /8 January 2018 →

All Critical High Medium Low Exploited only Public exploit

30 results · Feed

Unscored —

CVE-2017-17480

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vuln…

openjpeg2 openjpeg2 openjpeg Debian Ubuntu Alpine

Dec 8, 2017
Unscored —

CVE-2017-17479

In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulne…

openjpeg2 openjpeg2 openjpeg Debian Ubuntu

Dec 8, 2017
Unscored —

CVE-2017-11482

The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.…

Elastic Kibana

Dec 8, 2017
High 7.5

CVE-2017-11480

Denial of Service in Packetbeat

Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traffic and a user is able to send arbitrary network traffic to the monitored port, the attacker could pr…

Elastic Packetbeat github.com/elastic/beats Go

Dec 8, 2017
Unscored —

CVE-2017-11481

Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow…

Elastic Kibana

Dec 8, 2017
Unscored —

CVE-2017-16854

In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attack…

otrs2 otrs2 Debian Ubuntu

Dec 8, 2017
Unscored —

CVE-2017-12823

Kernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1.2.0.300 leads to local…

Kaspersky Labs Kaspersky Embedded Systems Security

Dec 8, 2017
Unscored —

CVE-2017-15893

Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology File Station before 1.1.1-0099 allows rem…

Synology Synology File Station

Dec 8, 2017
Unscored —

CVE-2017-15895

Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager (SRM) before 1.1.5-6542-4 …

Synology Synology Router Manager (SRM)

Dec 8, 2017
Unscored —

CVE-2017-15891

Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1-0242 allows remote authen…

Synology Synology Calendar

Dec 8, 2017
Unscored —

CVE-2017-15894

Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager (DSM) 6.0.x before 6.…

Synology Synology DiskStation Manager (DSM)

Dec 8, 2017
Unscored —

CVE-2017-16921 Public exploit EPSS 20%

In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.…

otrs2 otrs2 Debian Ubuntu

Dec 8, 2017
Unscored —

CVE-2017-10893

Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software" Ver3…

Japan Agency for Local Authority Information Systems The Public Certification Service for Individuals "The JPKI user's software"

Dec 8, 2017
Unscored —

CVE-2017-10897

Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07…

BUFFALO BBR-4MG BBR-4HG

Dec 8, 2017
Critical 9.8

CVE-2017-10906

Fluentd Escape Sequence Injection Vulnerability

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.

Cloud Native Computing Foundation (CNCF) Fluentd fluentd RubyGems

Dec 8, 2017
Unscored —

CVE-2017-10896

Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and …

BUFFALO BBR-4MG BBR-4HG

Dec 8, 2017
Unscored —

CVE-2017-11940 EPSS 21%

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows…

Microsoft Microsoft Malware Protection Engine

Dec 8, 2017
Unscored —

CVE-2017-17467

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified…

Dec 8, 2017
Unscored —

CVE-2017-17475

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified…

Dec 8, 2017
Unscored —

CVE-2017-17468

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write…

Dec 8, 2017
Unscored —

CVE-2017-17473

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified…

Dec 8, 2017
Unscored —

CVE-2017-17470

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified…

Dec 8, 2017
Unscored —

CVE-2017-17471

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified…

Dec 8, 2017
Unscored —

CVE-2017-17474

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified…

Dec 8, 2017
Unscored —

CVE-2017-17469

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified…

Dec 8, 2017
Unscored —

CVE-2017-17466

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write…

Dec 8, 2017
Unscored —

CVE-2017-17472

TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified…

Dec 8, 2017
Unscored —

CVE-2017-17465

K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002574 DeviceIoControl reques…

Dec 8, 2017
Unscored —

CVE-2017-17463

Vivo modems allow remote attackers to obtain sensitive information by reading the index.cgi?page=wifi HTML source code,…

Dec 8, 2017
Unscored —

CVE-2017-17464

K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002570 DeviceIoControl reques…

Dec 8, 2017