Skip to content
OpenAdvisories

Archive

14 December 2017

Vulnerabilities first published on this day (UTC), newest first.

← November 2017 2017 / December /14 January 2018 →
  1. 141
  2. 26
  3. 38
  4. 422
  5. 560
  6. 657
  7. 730
  8. 830
  9. 986
  10. 103
  11. 1152
  12. 1258
  13. 13104
  14. 1435
  15. 1536
  16. 165
  17. 174
  18. 1831
  19. 1913
  20. 20134
  21. 2151
  22. 2235
  23. 2316
  24. 2428
  25. 2540
  26. 2619
  27. 2723
  28. 2826
  29. 2926
  30. 3024
  31. 314
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2016-10703

    Denial of Service in ecstatic

    A regular expression Denial of Service (DoS) vulnerability in the file lib/ecstatic.js of the ecstatic npm package, before version 2.0.0, allows a remote attacker to overload and crash a server by passing a maliciously crafted string.

    ecstatic npm
  • High 8.8
    CVE-2017-17520

    tools/url_handler.pl in TIN 2.4.1 does not validate strings before launching the program specified by the BROWSER envir…

  • High 8.8
    CVE-2017-17514

    boxes.c in nip2 8.4.0 does not validate strings before launching the program specified by the BROWSER environment varia…

    nip2 Debian
  • High 8.8
    CVE-2017-17516

    Reddit Terminal Viewer (RTV) vulnerable to argument injection attacks

    scripts/inspect_webbrowser.py in Reddit Terminal Viewer (RTV) 1.19.0 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted U…

    rtv rtv rtv Debian Ubuntu PyPI