Skip to content
OpenAdvisories

Archive

December 2017

Vulnerabilities first published in this month (UTC), newest first.

← November 2017 2017 / December January 2018 →
  1. 141
  2. 26
  3. 38
  4. 422
  5. 560
  6. 657
  7. 730
  8. 830
  9. 986
  10. 103
  11. 1152
  12. 1258
  13. 13104
  14. 1435
  15. 1536
  16. 165
  17. 174
  18. 1831
  19. 1913
  20. 20134
  21. 2151
  22. 2235
  23. 2316
  24. 2428
  25. 2540
  26. 2619
  27. 2723
  28. 2826
  29. 2926
  30. 3024
  31. 314
All Critical High Medium Low Exploited only Public exploit

181 results · Clear filters · Feed

  • Unscored —
    CVE-2017-18001 Public exploit EPSS 14%

    Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the d…

  • Unscored —
    CVE-2015-3302 Public exploit EPSS 22%

    The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before …

    Web / CMS
  • Unscored —
    CVE-2017-17917 Public exploit

    SQL injection vulnerability in the 'where' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute…

    rails Debian
  • Unscored —
    CVE-2017-17968 Public exploit EPSS 39%

    A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remo…

  • Unscored —
    CVE-2017-15667 Public exploit

    In Flexense SysGauge Server 3.6.18, the Control Protocol suffers from a denial of service. The attack vector is a craft…

  • Unscored —
    CVE-2017-17932 Public exploit EPSS 54%

    A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow…

  • Unscored —
    CVE-2017-9608 Public exploit

    The dnxhd decoder in FFmpeg before 3.2.6, and 3.3.x before 3.3.3 allows remote attackers to cause a denial of service (…

    ffmpeg ffmpeg Debian Alpine
  • Unscored —
    CVE-2015-7889 Public exploit

    The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions …

  • Unscored —
    CVE-2016-6914 Public exploit

    Ubiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation directory, which allows local …

  • Unscored —
    CVE-2017-13056 Public exploit

    The launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to execute arbitrary code v…

  • Unscored —
    CVE-2017-17875 Public exploit

    The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action.

  • Unscored —
    CVE-2017-17876 Public exploit

    Biometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file-read restrictions via a …

  • Unscored —
    CVE-2017-7154 Public exploit

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS …

  • Unscored —
    CVE-2017-13847 Public exploit

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The i…

  • Unscored —
    CVE-2017-13867 Public exploit

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS …

  • Unscored —
    CVE-2017-13869 Public exploit

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS …

  • Unscored —
    CVE-2017-13865 Public exploit

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS …

  • Unscored —
    CVE-2017-13861 Public exploit EPSS 15%

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. watchOS b…

  • Unscored —
    CVE-2017-13878 Public exploit

    An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Grap…

  • Unscored —
    CVE-2017-13855 Public exploit

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS …

  • Unscored —
    CVE-2017-13875 Public exploit

    An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Grap…

  • Unscored —
    CVE-2017-13868 Public exploit

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS …

  • Unscored —
    CVE-2017-13876 Public exploit

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS …

  • Unscored —
    CVE-2017-17849 Public exploit EPSS 19%

    A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to exe…

  • Unscored —
    CVE-2017-17872 Public exploit

    The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action.

  • Unscored —
    CVE-2017-17873 Public exploit

    Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.

  • Unscored —
    CVE-2017-17874 Public exploit

    Vanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new product" or "Add a product…

  • Unscored —
    CVE-2017-17871 Public exploit

    The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags actio…

  • Unscored —
    CVE-2017-17870 Public exploit

    The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.

  • Unscored —
    CVE-2017-16995 Public exploit EPSS 30%

    The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2017-17692 Public exploit EPSS 79%

    Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive informa…

  • Unscored —
    CVE-2017-17411 Public exploit EPSS 88%

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. Auth…

    Linksys Linksys WVBR0
  • Unscored —
    CVE-2017-5259 Public exploit EPSS 33%

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web…

    Cambium Networks cnPilot
  • Unscored —
    CVE-2017-5255 Public exploit EPSS 74%

    In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the we…

    Cambium Networks ePMP
  • Unscored —
    CVE-2017-5254 Public exploit EPSS 52%

    In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have th…

    Cambium Networks ePMP
  • Unscored —
    CVE-2017-5262 Public exploit

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has acces…

    Cambium Networks cnPilot
  • Unscored —
    CVE-2017-5261 Public exploit

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web a…

    Cambium Networks cnPilot
  • Unscored —
    CVE-2017-5260 Public exploit

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration fi…

    Cambium Networks cnPilot
  • Unscored —
    CVE-2012-2576 Public exploit EPSS 60%

    SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Pro…

  • Unscored —
    CVE-2017-17752 Public exploit

    Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code execut…