Skip to content
OpenAdvisories

Archive

24 December 2017

Vulnerabilities first published on this day (UTC), newest first.

← November 2017 2017 / December /24 January 2018 →
  1. 141
  2. 26
  3. 38
  4. 422
  5. 560
  6. 657
  7. 730
  8. 830
  9. 986
  10. 103
  11. 1152
  12. 1258
  13. 13104
  14. 1435
  15. 1536
  16. 165
  17. 174
  18. 1831
  19. 1913
  20. 20134
  21. 2151
  22. 2235
  23. 2316
  24. 2428
  25. 2540
  26. 2619
  27. 2723
  28. 2826
  29. 2926
  30. 3024
  31. 314
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • High 7.5
    CVE-2017-17898

    Dolibarr sensitive information disclosure

    Dolibarr ERP/CRM version 6.0.4 does not block direct requests to *.tpl.php files, which allows remote attackers to obtain sensitive information.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Unscored —
    CVE-2017-17849 Public exploit EPSS 19%

    A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to exe…

  • Unscored —
    CVE-2017-17891

    Readymade Video Sharing Script has CSRF via user-profile-edit.php.

  • Critical 9.8
    CVE-2017-17897

    Dolibarr SQL injection vulnerability in comm/multiprix.php

    SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Critical 9.8
    CVE-2017-17900

    Dolibarr SQL injection vulnerability in fourn/index.php

    SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Unscored —
    CVE-2017-17892

    Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search p…

  • Unscored —
    CVE-2017-17896

    Readymade Job Site Script has XSS via the keyword parameter to the /job URI.

  • Unscored —
    CVE-2017-17893

    Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or…

  • Unscored —
    CVE-2017-17895

    Readymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.

  • Critical 9.8
    CVE-2017-17899

    Dolibarr SQL injection vulnerability in adherents/subscription/info.php

    SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the rowid parameter.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Unscored —
    CVE-2017-17894

    Readymade Job Site Script has CSRF via the /job URI.

  • Unscored —
    CVE-2017-17888 EPSS 28%

    cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500…

  • Unscored —
    CVE-2017-17859

    Samsung Internet Browser 6.2.01.12 allows remote attackers to bypass the Same Origin Policy, and conduct UXSS attacks t…

  • Unscored —
    CVE-2017-17886

    In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPSDChannelZip in coders/psd.c, w…

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-17879

    In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in ReadOneMNGImage in coders/png.…

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-17885

    In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage in coders/pict.c, whic…

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-17882

    In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage in coders/xpm.c, which …

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-17884

    In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function WriteOnePNGImage in coders/png.c, wh…

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-17881

    In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage in coders/mat.c, which …

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-17883

    In ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage in coders/pgx.c, which …

    imagemagick Debian
  • Unscored —
    CVE-2017-17880

    In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp…

    imagemagick Debian
  • Unscored —
    CVE-2017-17887

    In ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function GetImagePixelCache in magick/cache.c…

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-17878

    An issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters are truncated because of…

  • Unscored —
    CVE-2017-17877

    An issue was discovered in Valve Steam Link build 643. When the SSH daemon is enabled for local development, the device…

  • Unscored —
    CVE-2017-17872 Public exploit

    The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action.

  • Unscored —
    CVE-2017-17873 Public exploit

    Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.

  • Unscored —
    CVE-2017-17874 Public exploit

    Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product…

  • Unscored —
    CVE-2017-17871 Public exploit

    The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags actio…