CVEs published in December 2017
1,146 vulnerabilities, 220 critical, 2 exploited.
- node.jsNode.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read()...9.1 Critical
- ibm sterling file gatewayIBM Sterling File Gateway 2.2 could allow an authenticated user to change other user's passwords....6.5 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2 could allow a remote attacker to traverse directories on the system...5.3 Medium
- ibm websphere portalIBM Support Tools for Lotus WCM (IBM WebSphere Portal 7.0, 8.0, 8.5 and 9.0) is vulnerable to...5.4 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Jazz Foundation Products could disclose sensitive information during a scan that could lead...4.3 Medium
- huawei ec156 firmware, ec176 firmware, ec177 firmware +2 moreHuawei EC156, EC176, and EC177 USB Modem products with software before UTPS...7.8 High
- changyou dolphinThe Backup and Restore feature in Mobotap Dolphin Browser for Android 12.0.2 suffers from an...8.8 High
- scubez posty readymade classifiedsPosty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings...9.8 Critical
- techno - portfolio management panel project - portfolio management panelTechno Portfolio Management Panel 1.0 allows an attacker to inject SQL commands via a single.php...9.8 Critical
- palo alto networks pan-osPalo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x...9.8 Critical
- paloaltonetworks pan-osThe configuration file import for applications, spyware and vulnerability objects functionality...5.3 Medium
- paloaltonetworks pan-osPalo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.13, and 8.0.x...7.5 High
- paloaltonetworks pan-osThe web interface packet capture management component in Palo Alto Networks PAN-OS before 6.1.19,...9.8 Critical
- paloaltonetworks globalprotectPalo Alto Networks GlobalProtect Agent before 4.0.3 allows attackers with administration rights...6.7 Medium
- resolver perspectivePerspective ICM Investigation & Case 5.1.1.16 allows remote authenticated users to modify access...8.8 High
- puppet enterpriseThe console in Puppet Enterprise 3.7.x, 3.8.x, and 2015.2.x does not set the secure flag for the...6.5 Medium
- puppet enterpriseCross-site scripting (XSS) vulnerability in the console in Puppet Enterprise before 2015.2.1...6.1 Medium
- phoenixcontact fl com server rs232 firmware, fl com server rs485 firmware, fl comserver bas 232 firmware +10 more +12 moreA Cross-site Scripting issue was discovered in PHOENIX CONTACT FL COMSERVER BASIC 232/422/485, FL...6.1 Medium
- qnap qsync, qsync for windows (exe) +1 moreA DLL Hijacking vulnerability in QNAP Qsync for Windows (exe) version 4.2.2.0724 and earlier...7.8 High
- check mk project mk, tenable check mk +1 moreA cross site scripting (XSS) vulnerability exists in Check_MK versions 1.2.8x prior to 1.2.8p25...6.1 Medium
- apache synapse, oracle financial services market risk measurement and management, peoplesoft enterprise peopletools +2 moreRemote Code Execution in Apache Synapse9.8 Critical
- netapp vasa provider for clustered data ontap, vasa provider +1 moreVersions of VASA Provider for Clustered Data ONTAP prior to 7.0P1 contain a web server that...8.1 High
- phacility phabricatorPhabricator before 2017-11-10 does not block the --config and --debugger flags to the Mercurial...8.8 High
- lilypondlilypond-invoke-editor in LilyPond 2.19.80 does not validate strings before launching the program...8.8 High
- ivanti endpoint managerIn Ivanti Service Desk (formerly LANDESK Management Suite) versions between 2016.3 and 2017.3, an...8.8 High
- hdfgroup hdf5In HDF5 1.10.1, there is an out of bounds write vulnerability in the function H5G__ent_decode_vec...8.8 High
- hdfgroup hdf5In HDF5 1.10.1, there is a divide-by-zero vulnerability in the function H5T_set_loc in the H5T.c...6.5 Medium
- hdfgroup hdf5In HDF5 1.10.1, there is an out of bounds read vulnerability in the function H5T_conv_struct_opt...6.5 Medium
- hdfgroup hdf5In HDF5 1.10.1, there is an out of bounds read vulnerability in the function...6.5 Medium
- hdfgroup hdf5In HDF5 1.10.1, there is a NULL pointer dereference in the function H5O_pline_decode in the...6.5 Medium
- graphicsmagick, debian linux +1 moreReadGRAYImage in coders/gray.c in GraphicsMagick 1.3.26 has a magick/import.c...8.8 High
- graphicsmagick, debian linux +1 moreReadCMYKImage in coders/cmyk.c in GraphicsMagick 1.3.26 has a magick/import.c...8.8 High
- graphicsmagick, debian linux +1 moreWriteOnePNGImage in coders/png.c in GraphicsMagick 1.3.26 has a heap-based buffer over-read via a...8.8 High
- graphicsmagick, debian linux +1 moreReadRGBImage in coders/rgb.c in GraphicsMagick 1.3.26 has a magick/import.c ImportRGBQuantumType...8.8 High
- graphicsmagickWritePNMImage in coders/pnm.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial...8.8 High
- integrationmatters njams, tibco businessworks process monitor +1 moreCross-site scripting (XSS) vulnerability in Integration Matters nJAMS 3 before 3.2.0 Hotfix 7, as...4.8 Medium
- sensible-utils project sensible-utils, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 moresensible-browser in sensible-utils before 0.0.11 does not validate strings before launching the...8.8 High
- powerdns recursor, debian linux, power dns pdns-recursor +2 moreAn issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8...7.5 High
- htacg tidyIn Tidy 5.7.0, the prvTidyTidyMetaCharset function in clean.c allows attackers to cause a denial...7.5 High
- icu-project international components for unicodeThe ucnv_UTF8FromUTF8 function in ucnv_u8.cpp in International Components for Unicode (ICU) for C...9.8 Critical
- amag en-1dbc firmware, en-2dbc firmware, std firmware +2 moreIncorrect access control in AMAG Symmetry Door Edge Network Controllers (EN-1DBC Boot App 23611...7.5 High
- mozilla firefox, firefox esr, debian linux +5 more +7 moreWhen Private Browsing mode is used, it is possible for a web worker to write persistent data to...7.5 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreImageMagick before 7.0.7-12 has a coders/png.c Magick_png_read_raw_profile heap-based buffer over...6.5 Medium
- imagemagick, canonical ubuntu linux, debian linux +2 moreImageMagick before 6.9.9-24 and 7.x before 7.0.7-12 has a use-after-free in Magick::Image::read...9.8 Critical
- adobe experience managerAn issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Sensitive tokens are...7.5 High
- adobe experience managerAn issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. Adobe Experience Manager...6.1 Medium
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...8.8 High
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...6.5 Medium
- adobe acrobat, acrobat dc, acrobat reader +1 more +3 moreAn issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017...8.8 High
- Show moreLoading…