CVEs published in December 2017
1,146 vulnerabilities, 220 critical, 2 exploited.
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.5 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the...7.8 High
- atlassian auto-unapprove plugin (for bitbucket server), bitbucket auto unapprove plugin +1 moreIt is possible to bypass the bitbucket auto-unapprove plugin via minimal brute-force because it...8.5 High
- atlassian confluenceThe RSS Feed macro in Atlassian Confluence before version 6.5.2 allows remote attackers to inject...6.1 Medium
- getkovri kovri, i2pd +1 moreThe (1) i2pd before 2.17 and (2) kovri pre-alpha implementations of the I2P routing protocol do...7.5 High
- claymore dual miner project dual minerThe remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated...9.8 Critical
- claymore dual miner project dual minerThe remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an...8.1 High
- linux kernelThe dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local...7.8 High
- samba rsync, debian linux +1 moreThe daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp...9.8 Critical
- samba rsync, debian linux +1 moreThe recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before...3.7 Low
- gnu glibcThe malloc function in the GNU C Library (aka glibc or libc6) 2.26 could return a memory block...8.1 High
- openstack novaOpenStack Nova DoS by rebuilding the same instance with a new image multiple times8.6 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19...7.8 High
- synology diskstation manager (dsm), diskstation manager +1 moreCommand injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2...8.8 High
- qnap systems inc. photo stationAn information exposure vulnerability in default HTTP configuration file in Synology Photo...5.3 Medium
- qnap systems inc. photo stationFiles or directories accessible to external parties vulnerability in picasa.php in Synology Photo...7.5 High
- geovap reliance-scadaA Cross-site Scripting issue was discovered in Geovap Reliance SCADA Version 4.7.3 Update 2 and...6.1 Medium
- zkteco zktime webThere is a reflected XSS vulnerability in ZKTime Web 2.0.1.12280. The vulnerability exists due to...6.1 Medium
- zkteco zktime webThe ZKTime Web Software 2.0.1.12280 allows the Administrator to elevate the privileges of the...8.8 High
- libavThe ff_free_picture_tables function in libavcodec/mpegpicture.c in Libav 12.2 allows remote...8.8 High
- libavThe ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c in Libav 12.2 allows remote attackers...8.8 High
- libavThe h264_slice_init function in libavcodec/h264_slice.c in Libav 12.2 allows remote attackers to...6.5 Medium
- libavThe vc1_decode_frame function in libavcodec/vc1dec.c in Libav 12.2 allows remote attackers to...6.5 Medium
- gnu binutilsThe load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to...7.8 High
- gnu binutilsnm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which allows remote...7.8 High
- gnu binutilsThe _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library...7.8 High
- gnu binutilsThe coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library ...5.5 Medium
- gnu binutilsThe dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc...7.8 High
- gnu binutilsThe Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1,...7.8 High
- ikarussecurity anti.virusntguard.sys and ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 have a Memory Corruption...7.8 High
- ikarussecurity anti.virusntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a NULL pointer dereference via a...5.5 Medium
- ikarussecurity anti.virusntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has a Pool Corruption vulnerability via...7.8 High
- fiyo cmsFiyo CMS 2.0.7 has an arbitrary file read vulnerability in dapur/apps/app_theme/libs/check_file...7.5 High
- fiyo cmsFiyo CMS 2.0.7 has SQL injection in /apps/app_user/sys_user.php via $_POST[name] or $_POST[email]...8.8 High
- fiyo cmsFiyo CMS 2.0.7 has SQL injection in /system/site.php via $_REQUEST['link'].7.5 High
- flexense syncbreezeThere exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of...7.8 High
- content cards project cardsCross-site scripting (XSS) vulnerability in the Content Cards plugin before 0.9.7 for WordPress...6.1 Medium
- sap businessobjects financial consolidationCross-Site Scripting (XSS) exists in SAP Business Objects Financial Consolidation before 2017-06...6.1 Medium
- tor project tor, debian linux +1 moreIn Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before...8.1 High
- tor project tor, debian linux +1 moreIn Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before...3.7 Low
- tor project tor, debian linux +1 moreIn Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before...7.5 High
- tor project tor, debian linux +1 moreIn Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before...7.5 High
- Show moreLoading…