Skip to content
OpenAdvisories

Archive

29 December 2017

Vulnerabilities first published on this day (UTC), newest first.

← November 2017 2017 / December /29 January 2018 →
  1. 141
  2. 26
  3. 38
  4. 422
  5. 560
  6. 657
  7. 730
  8. 830
  9. 986
  10. 103
  11. 1152
  12. 1258
  13. 13104
  14. 1435
  15. 1536
  16. 165
  17. 174
  18. 1831
  19. 1913
  20. 20134
  21. 2151
  22. 2235
  23. 2316
  24. 2428
  25. 2540
  26. 2619
  27. 2723
  28. 2826
  29. 2926
  30. 3024
  31. 314
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.8
    CVE-2017-17973

    In LibTIFF 4.0.8, there is a heap-based use-after-free in the t2p_writeproc function in tiff2pdf.c. NOTE: there is a th…

    tiff Ubuntu
  • High 8.1
    CVE-2017-17919

    SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute…

    rails Debian
  • High 7.5
    CVE-2013-7400

    The Direct Mail (direct_mail) TYPO3 extension improperly discloses sensitive information

    The Direct Mail (direct_mail) extension before 3.1.2 for TYPO3 allows remote attackers to obtain sensitive information by leveraging improper checking of authentication codes.

    directmailteam/direct-mail Packagist
  • High 7.5
    CVE-2014-3651

    Keycloak vulnerable to uncontrolled resource consumption

    JBoss KeyCloak before 1.0.3.Final allows remote attackers to cause a denial of service (resource consumption) via a large value in the size parameter to auth/qrcode, related to QR code generation.

    org.keycloak:keycloak-core Maven