Skip to content
OpenAdvisories

Archive

December 2017

Vulnerabilities first published in this month (UTC), newest first.

← November 2017 2017 / December January 2018 →
  1. 141
  2. 26
  3. 38
  4. 422
  5. 560
  6. 657
  7. 730
  8. 830
  9. 986
  10. 103
  11. 1152
  12. 1258
  13. 13104
  14. 1435
  15. 1536
  16. 165
  17. 174
  18. 1831
  19. 1913
  20. 20134
  21. 2151
  22. 2235
  23. 2316
  24. 2428
  25. 2540
  26. 2619
  27. 2723
  28. 2826
  29. 2926
  30. 3024
  31. 314
All Critical High Medium Low Exploited only Public exploit

181 results · Clear filters · Feed

  • Critical 9.8
    CVE-2017-15944 Exploited Public exploit Scanner template EPSS 98%

    Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote…

    KEV Aug 18, 2022
  • Critical 9.8
    CVE-2017-15708 Public exploit EPSS 18%

    Remote Code Execution in Apache Synapse

    In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI). So Apache Synapse 3.0.1 or all previous releases (3.0.0, 2.1.0, 2.0.0, 1.2, 1.1.2, 1.1.1) allows remote code execution attacks that can be performed by inject…

    Apache Software Foundation Apache Synapse org.apache.synapse:synapse-core Maven
  • Unscored —
    CVE-2017-16921 Public exploit EPSS 20%

    In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.…

    otrs2 otrs2 Debian Ubuntu
  • Unscored —
    CVE-2017-16884 Public exploit

    Cross-site scripting (XSS) vulnerability in MistServer before 2.13 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2017-17055 Public exploit

    Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-sit…

  • Unscored —
    CVE-2017-13156 Public exploit EPSS 20%

    An elevation of privilege vulnerability in the Android system (art). Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0…

    Google Android Android
  • Unscored —
    CVE-2017-14355 Public exploit

    A potential security vulnerability has been identified in HPE Connected Backup versions 8.6 and 8.8.6. The vulnerabilit…

  • Unscored —
    CVE-2016-1252 Public exploit

    The apt package in Debian jessie before 1.0.9.8.4, in Debian unstable before 1.4~beta2, in Ubuntu 14.04 LTS before 1.0.…

    apt apt Debian Ubuntu
  • Unscored —
    CVE-2017-16930 Public exploit EPSS 34%

    The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execut…

  • Unscored —
    CVE-2017-16929 Public exploit EPSS 13%

    The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory travers…

  • Unscored —
    CVE-2017-8824 Public exploit

    The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileg…

    linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  • Unscored —
    CVE-2017-15889 Public exploit EPSS 74%

    Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote auth…

    Synology DiskStation Manager (DSM)
  • Unscored —
    CVE-2017-17099 Public exploit EPSS 12%

    There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enter…

  • Unscored —
    CVE-2017-17095 Public exploit EPSS 11%

    tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-…

    tiff tiff tiff Debian Ubuntu Alpine
  • Unscored —
    CVE-2017-17090 Public exploit EPSS 82%

    An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and ol…

    asterisk asterisk Debian Ubuntu
  • Unscored —
    CVE-2017-16953 Public exploit EPSS 11%

    connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to m…

  • Unscored —
    CVE-2017-16895 Public exploit

    The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helpe…

  • Unscored —
    CVE-2017-15357 Public exploit

    The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges …

  • Unscored —
    CVE-2017-11282 Public exploit EPSS 34%

    Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser. Successful exploitation c…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2017-11281 Public exploit EPSS 33%

    Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function. Successful exploit…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2017-17085 Public exploit EPSS 17%

    In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/disse…

    wireshark wireshark wireshark Debian Ubuntu Alpine