Skip to content
OpenAdvisories

Archive

26 December 2017

Vulnerabilities first published on this day (UTC), newest first.

← November 2017 2017 / December /26 January 2018 →
  1. 141
  2. 26
  3. 38
  4. 422
  5. 560
  6. 657
  7. 730
  8. 830
  9. 986
  10. 103
  11. 1152
  12. 1258
  13. 13104
  14. 1435
  15. 1536
  16. 165
  17. 174
  18. 1831
  19. 1913
  20. 20134
  21. 2151
  22. 2235
  23. 2316
  24. 2428
  25. 2540
  26. 2619
  27. 2723
  28. 2826
  29. 2926
  30. 3024
  31. 314
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Unscored —
    CVE-2017-17924

    PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via the …

  • Unscored —
    CVE-2017-17929

    PHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter.

  • Unscored —
    CVE-2017-17926

    PHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it easier for remote attack…

  • Unscored —
    CVE-2017-17925

    PHP Scripts Mall Professional Service Script has XSS via the admin/general_settingupd.php website_title parameter.

  • Unscored —
    CVE-2017-17930

    PHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as demonstrated by modifying a …

  • Unscored —
    CVE-2017-17931

    PHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.

  • Unscored —
    CVE-2017-17927

    PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a cr…

  • Unscored —
    CVE-2017-17928

    PHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id parameter.

  • Unscored —
    CVE-2017-17913

    In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c,…

    graphicsmagick graphicsmagick Debian Ubuntu
  • Unscored —
    CVE-2017-17915

    In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadMNGImage in coders/png.c, rel…

    graphicsmagick graphicsmagick Debian Ubuntu
  • Unscored —
    CVE-2017-17912

    In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in ReadNewsProfile in coders/tiff.c,…

    graphicsmagick graphicsmagick Debian Ubuntu
  • Unscored —
    CVE-2017-17914

    In ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders/png.c, which allows at…

    imagemagick imagemagick Debian Ubuntu
  • Unscored —
    CVE-2017-17911

    packages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p=core/contact request,…

  • Unscored —
    CVE-2017-17875 Public exploit

    The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action.

  • Unscored —
    CVE-2017-17876 Public exploit

    Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a …

  • High 8.8
    CVE-2017-12736

    After initial configuration, the Ruggedcom Discovery Protocol (RCDP) is still able to write to the device under certain…

    Siemens RUGGEDCOM RS416Pv2 V5.X RUGGEDCOM RS416v2 V5.X RUGGEDCOM RMC8388 V5.X ICS / OT
  • Unscored —
    CVE-2017-12740

    Siemens LOGO! Soft Comfort (All versions before V8.2) lacks integrity verification of software packages downloaded via …

  • High 7.5
    CVE-2017-12741

    Specially crafted packets sent to port 161/udp could cause a denial of service condition. The affected devices must be …

    Siemens SIMATIC S7-1200 CPU family (incl. SIPLUS variants) SIMATIC S7-1500 Software Controller SIMATIC S7-1500 CPU family (incl. related ET200 CPUs and SIPLUS variants) ICS / OT
  • Unscored —
    CVE-2017-9944

    A vulnerability has been identified in Siemens 7KT PAC1200 data manager (7KT1260) in all versions < V2.03. The integrat…