Skip to content
OpenAdvisories

Archive

29 December 2017

Vulnerabilities first published on this day (UTC), newest first.

← November 2017 2017 / December /29 January 2018 →
  1. 141
  2. 26
  3. 38
  4. 422
  5. 560
  6. 657
  7. 730
  8. 830
  9. 986
  10. 103
  11. 1152
  12. 1258
  13. 13104
  14. 1435
  15. 1536
  16. 165
  17. 174
  18. 1831
  19. 1913
  20. 20134
  21. 2151
  22. 2235
  23. 2316
  24. 2428
  25. 2540
  26. 2619
  27. 2723
  28. 2826
  29. 2926
  30. 3024
  31. 314
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2017-17760

    Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV

    OpenCV 3.3.1 has a Buffer Overflow in the cv::PxMDecoder::readData function in grfmt_pxm.cpp, because an incorrect size value is used.

    opencv-contrib-python opencv opencv-python opencv Debian Ubuntu PyPI
  • Medium 6.1
    CVE-2017-17971

    Dolibarr ERP and CRM contain XSS Vulnerability

    The test_sql_and_script_inject function in htdocs/main.inc.php in Dolibarr ERP/CRM 6.0.4 blocks some event attributes but neither onclick nor onscroll, which allows XSS.

    dolibarr dolibarr/dolibarr Ubuntu Packagist
  • Medium 6.1
    CVE-2017-16876

    mistune Cross-site scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape the "key" argument.

    mistune mistune mistune Debian Ubuntu PyPI