CVEs published in December 2017
1,146 vulnerabilities, 220 critical, 2 exploited.
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...8.8 High
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...7.5 High
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...8.8 High
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...8.8 High
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...8.8 High
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...8.8 High
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...6.5 Medium
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...8.8 High
- adobe photoshopAn issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable...9.8 Critical
- adobe photoshopAn issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable...9.8 Critical
- adobe indesignAn issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory...9.8 Critical
- adobe digital editionsAn issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable...5.3 Medium
- adobe digital editionsAn issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable...5.3 Medium
- adobe digital editionsAn issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable...5.3 Medium
- adobe digital editionsAn issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable...5.3 Medium
- adobe digital editionsAn issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable...5.3 Medium
- adobe experience managerAn issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. A cross-site scripting...6.1 Medium
- adobe dng converterAn issue was discovered in Adobe DNG Converter 9.12.1 and earlier versions. An exploitable memory...9.8 Critical
- adobe shockwaveAn issue was discovered in Adobe Shockwave 12.2.9.199 and earlier. An exploitable memory...9.8 Critical
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...9.8 Critical
- adobe connectAn issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request...10.0 Critical
- adobe connectAn issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress (or...6.1 Medium
- adobe connectAn issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site...6.1 Medium
- adobe connectAn issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site...6.1 Medium
- adobe connectAn issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site...6.1 Medium
- adobe digital editionsAn issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. Adobe Digital...5.5 Medium
- debian linux, linux kernel, canonical ubuntu linux +7 more +9 moreThe Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic...7.4 High
- uclouvain openjpegIn OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in...9.8 Critical
- elastic kibanaThe Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana...6.1 Medium
- elastic kibanaKibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL...6.1 Medium
- elastic packetbeatDenial of Service in Packetbeat7.5 High
- otrs, debian linux +1 moreIn Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6...6.5 Medium
- synology router manager, router manager (srm) +1 moreDirectory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager (SRM...6.5 Medium
- synology diskstation manager, diskstation manager (dsm) +1 moreDirectory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager...6.5 Medium
- synology file stationDirectory traversal vulnerability in the SYNO.FileStation.Extract in Synology File Station before...6.5 Medium
- synology calendarImproper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1...6.5 Medium
- kaspersky embedded systems securityKernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1...7.8 High
- otrs, debian linux +1 moreIn OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up...8.8 High
- cloud native computing foundation (cncf) fluentd, redhat openstack +1 moreFluentd Escape Sequence Injection Vulnerability9.8 Critical
- buffalo inc. bbr-4hg, bbr-4mg, buffalo bbr-4hg firmware +1 more +3 moreInput validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to...4.5 Medium
- buffalo inc. bbr-4hg, bbr-4mg, buffalo bbr-4hg firmware +1 more +3 moreCross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with...6.1 Medium
- j-lis the public certification service for individuals, japan agency for local authority information systems the public certification service for individuals "the jpki user's software" +1 moreUntrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI...7.8 High
- microsoft malware protection engineThe Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on...7.8 High
- opensuse obs-service-source validatorosc executes spec code during "osc commit"7.8 High
- suse build, opensuse leap, suse linux enterprise software development kit +2 morepackage builds could use directory traversal to write outside of target area9.9 Critical
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a...6.1 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInsufficient policy enforcement in Omnibox in Google Chrome prior to 63.0.3239.84 allowed a...6.5 Medium
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreInappropriate implementation in BoringSSL SPAKE2 in Google Chrome prior to 63.0.3239.84 allowed a...5.3 Medium
- Show moreLoading…