CVEs published in December 2017
1,146 vulnerabilities, 220 critical, 2 exploited.
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect handling of back navigations in error pages in Navigation in Google Chrome prior to 63...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Resource Timing API in Google Chrome prior to 63.0.3239.84...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse of uninitialized memory in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote...4.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate implementation in Skia canvas composite operations in Google Chrome prior to 63.0...5.3 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreHeap buffer overflow in Blob API in Google Chrome prior to 63.0.3239.84 allowed a remote attacker...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreIncorrect serialization in IPC in Google Chrome prior to 63.0.3239.84 allowed a remote attacker...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreType confusion in WebAssembly in V8 in Google Chrome prior to 63.0.3239.84 allowed a remote...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreUse after free in PDFium in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreHeap buffer overflow in Skia in Google Chrome prior to 63.0.3239.84 allowed a remote attacker to...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreHeap buffer overflow in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a remote attacker...8.8 High
- tgsoft vir.it explorerTG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or...7.8 High
- tgsoft vir.it explorerTG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or...7.8 High
- tgsoft vir.it explorerTG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or...7.8 High
- tgsoft vir.it explorerTG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or...7.8 High
- tgsoft vir.it explorerTG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or...7.8 High
- tgsoft vir.it explorerTG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or...7.8 High
- tgsoft vir.it explorerTG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or...7.8 High
- tgsoft vir.it explorerTG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of...7.8 High
- tgsoft vir.it explorerTG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or...7.8 High
- tgsoft vir.it explorerTG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of...7.8 High
- k7computing antivirusK7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002574...9.8 Critical
- k7computing antivirusK7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002570...9.8 Critical
- vivo modem firmwareVivo modems allow remote attackers to obtain sensitive information by reading the index.cgi?page...7.5 High
- uclouvain openjpeg, canonical ubuntu linux, debian linux +2 moreIn OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in...9.8 Critical
- debian linux, erlang erlang\/otp +1 moreThe Erlang otp TLS server answers with different TLS alerts to different error types in the RSA...5.9 Medium
- dell 2335dn firmware, 2355dn firmware +1 moreThe web user interface of Dell 2335dn and 2355dn Multifunction Laser Printers, firmware versions...6.1 Medium
- fossil scm fossilhttp_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted...8.8 High
- mercurial, debian linux +1 moreMercurial vulnerable to arbitrary code injection9.8 Critical
- microsoft malware protection engineThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...7.8 High
- hclsoftware connectionsIBM Connections 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to...5.4 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have...3.7 Low
- ibm sterling file gatewayIBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive...6.5 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator Standard Edition 5.2 allows a user to view sensitive information that...4.3 Medium
- ibm tririga application platformIBM TRIRIGA 3.2, 3.3, 3.4, and 3.5 could allow a remote attacker to hijack the clicking action of...5.4 Medium
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 7.5, 8.0, and 9.0 could allow an authenticated user to insert messages with a...6.5 Medium
- ibm atlas ediscovery process managementIBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to SQL injection. A remote attacker...8.8 High
- ibm atlas ediscovery process managementIBM Atlas eDiscovery Process Management 6.0.3 stores sensitive information in URL parameters....3.7 Low
- ibm atlas ediscovery process managementIBM Atlas eDiscovery Process Management 6.0.3 is vulnerable to cross-site scripting. This...5.4 Medium
- ibm atlas ediscovery process managementIBM Atlas eDiscovery Process Management 6.0.3 could allow an authenticated attacker to obtain...3.5 Low
- ibm insights foundation for energyIBM Insights Foundation for Energy 2.0 could reveal sensitive information in error messages to...4.3 Medium
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 8.0 and 9.0 could allow, under special circumstances, an unauthorized user to...3.7 Low
- ibm biginsights, infosphere biginsights +1 moreIBM Infosphere BigInsights 4.2.0 could allow an attacker to inject code that could allow access...4.4 Medium
- ibm security guardiumIBM Security Guardium 9.0, 9.1, and 9.5 supports interaction between multiple actors and allows...7.5 High
- sangoma netborder\/vega session firmwareSangoma NetBorder / Vega Session Controller before 2.3.12-80-GA allows remote attackers to...9.8 Critical
- ispconfigISPConfig 3.x before 3.1.9 allows remote authenticated users to obtain root access by creating a...8.8 High
- openssl, debian linux, nodejs node.js +2 moreThere is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation...5.9 Medium
- openssl, debian linux +1 moreOpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent...5.9 Medium
- wpmailster wp mailsterThe WP Mailster plugin before 1.5.5 for WordPress has XSS in the unsubscribe handler via the mes...6.1 Medium
- Show moreLoading…