Skip to content
OpenAdvisories

Archive

18 December 2017

Vulnerabilities first published on this day (UTC), newest first.

← November 2017 2017 / December /18 January 2018 →
  1. 141
  2. 26
  3. 38
  4. 422
  5. 560
  6. 657
  7. 730
  8. 830
  9. 986
  10. 103
  11. 1152
  12. 1258
  13. 13104
  14. 1435
  15. 1536
  16. 165
  17. 174
  18. 1831
  19. 1913
  20. 20134
  21. 2151
  22. 2235
  23. 2316
  24. 2428
  25. 2540
  26. 2619
  27. 2723
  28. 2826
  29. 2926
  30. 3024
  31. 314
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Unscored —
    CVE-2017-16949 Public exploit EPSS 19%

    An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper i…

  • Unscored —
    CVE-2017-17105 Public exploit EPSS 85%

    Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unaut…

  • Unscored —
    CVE-2017-17721 Public exploit

    CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, as…

  • Unscored —
    CVE-2017-17651 Public exploit

    Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum par…

  • Unscored —
    CVE-2017-17649 Public exploit

    Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.

  • Unscored —
    CVE-2017-17645 Public exploit

    Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.

  • Unscored —
    CVE-2017-17643 Public exploit

    FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.

  • Unscored —
    CVE-2017-17739 Public exploit EPSS 12%

    The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html…

  • Unscored —
    CVE-2017-17738 Public exploit

    The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tool…

  • Unscored —
    CVE-2017-17737 Public exploit

    The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_dia…

  • Unscored —
    CVE-2017-16997 Public exploit

    elf/dl-load.c in the GNU C Library (aka glibc or libc6) 2.19 through 2.26 mishandles RPATH and RUNPATH containing $ORIG…

    glibc eglibc glibc Debian Ubuntu