Skip to content
OpenAdvisories

Archive

20 December 2017

Vulnerabilities first published on this day (UTC), newest first.

← November 2017 2017 / December /20 January 2018 →
  1. 141
  2. 26
  3. 38
  4. 422
  5. 560
  6. 657
  7. 730
  8. 830
  9. 986
  10. 103
  11. 1152
  12. 1258
  13. 13104
  14. 1435
  15. 1536
  16. 165
  17. 174
  18. 1831
  19. 1913
  20. 20134
  21. 2151
  22. 2235
  23. 2316
  24. 2428
  25. 2540
  26. 2619
  27. 2723
  28. 2826
  29. 2926
  30. 3024
  31. 314
All Critical High Medium Low Exploited only Public exploit

134 results · Feed

  • Unscored —
    CVE-2017-17788

    In GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when there is no '\0' chara…

    gimp gimp gimp Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-17799

    In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service …

  • Unscored —
    CVE-2017-17796

    In TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to cause a denial of service …

  • Unscored —
    CVE-2017-17783

    In GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when QuantumDepth is 8.

    graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-17782

    In GraphicsMagick 1.3.27a, there is a heap-based buffer over-read in ReadOneJNGImage in coders/png.c, related to oFFs c…

    graphicsmagick graphicsmagick graphicsmagick Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-17786

    In GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c (related to bgr2rgb.p…

    gimp gimp gimp Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-17795

    In IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial of service (BSOD) or p…

  • Unscored —
    CVE-2017-17775

    Piwigo 2.9.2 has XSS via the name parameter in an admin.php?page=album-3-properties request.

  • Unscored —
    CVE-2017-17778

    Paid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php uid parameter.

  • Unscored —
    CVE-2017-17774

    admin/configuration.php in Piwigo 2.9.2 has CSRF.

  • Unscored —
    CVE-2017-17776

    Paid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.

  • Unscored —
    CVE-2017-17779

    Paid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.

  • Unscored —
    CVE-2017-17780

    The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message…

  • Unscored —
    CVE-2017-17777

    Paid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as demonstrated by the adm…