CVEs published in December 2017
1,146 vulnerabilities, 220 critical, 2 exploited.
- microsoft chakracore, edge, microsoft corporation chakracore, microsoft edge +2 moreChakraCore vulnerable to remote code execution7.5 High
- microsoft chakracore, edge, microsoft corporation chakracore, microsoft edge +2 moreChakraCore RCE Vulnerability7.5 High
- microsoft internet explorerInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and...7.5 High
- microsoft internet explorerInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and...5.3 Medium
- microsoft chakracore, edge, microsoft corporation chakracore, microsoft edge +2 moreChakraCore RCE Vulnerability7.5 High
- microsoft internet explorerInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and...7.5 High
- microsoft internet explorerInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows...7.5 High
- microsoft windows 10, windows server 2016, microsoft corporation device guard +2 moreDevice Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server,...9.8 Critical
- microsoft chakracore, edge, internet explorer +1 more +3 moreChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows...7.5 High
- microsoft chakracore, edge, internet explorer +1 more +3 moreChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1,...7.5 High
- microsoft chakracore, edge, microsoft corporation chakracore, microsoft edge +2 moreChakraCore vulnerable to remote code execution7.5 High
- microsoft internet explorerMicrosoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows...7.5 High
- microsoft chakracore, edge, microsoft corporation chakracore, microsoft edge +2 moreChakraCore RCE Vulnerability7.5 High
- microsoft edgeMicrosoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016...7.5 High
- microsoft internet explorerInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and...5.3 Medium
- microsoft internet explorerMicrosoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows...7.5 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreWindows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012...6.6 Medium
- intel graphics driverType Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged...7.8 High
- [unknown] openstack-tripleo-heat-templates, ceph +1 moreOpenstack tripleo-heat-templates unauthenticated file access6.3 Medium
- embedthis goahead, oracle integrated lights out manager +1 moreEmbedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program...8.1 High
- seacms project seacmsSeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a...7.2 High
- westerndigital my cloud pr4100 firmwareAn issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web...9.8 Critical
- sap note assistant, business application software integrated solution +1 moreSAP Note Assistant tool (SAP BASIS from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31,7.40, from 7...6.5 Medium
- sap plant connectivityA malicious DLL preload attack possible on NwSapSetup and Installation self-extracting program...7.8 High
- sap kernel, trusted rfc connection +1 moreA Trusted RFC connection in SAP KERNEL 32NUC, SAP KERNEL 32Unicode, SAP KERNEL 64NUC, SAP KERNEL...8.8 High
- sap hana database, hana extended application services +1 moreThe user self-service tools of SAP HANA extended application services, classic user self-service,...5.3 Medium
- sap business warehouse universal data integrationCross-Site scripting (XSS) in SAP Business Warehouse Universal Data Integration, from 7.10 to 7...6.1 Medium
- sap business intelligence promotion management applicationSAP Business Intelligence Promotion Management Application, Enterprise 4.10, 4.20, and 4.30, does...9.8 Critical
- sap business objects platform, businessobjects +1 moreDenial of Service (DOS) in SAP Business Objects Platform, Enterprise 4.10 and 4.20, that could...6.5 Medium
- sap netweaver internet transaction server, netweaver internet transaction server (its), business application software integrated solution +2 moreSAP NetWeaver Internet Transaction Server (ITS), SAP Basis from 7.00 to 7.02, 7.30, 7.31, 7.40,...7.2 High
- sap business intelligence promotion management application, business intelligence promotion management application. +1 moreCross-Site Scripting (XSS) vulnerability in SAP Business Intelligence Promotion Management...6.1 Medium
- sap hana extended application servicesTwo potential audit log injections in SAP HANA extended application services 1.0, advanced model:...7.5 High
- sap startup service, kernel +1 moreURL redirection vulnerability in SAP's Startup Service, SAP KERNEL 32 NUC, SAP KERNEL 32 Unicode,...6.1 Medium
- sap epbc, epbc2, kmc-bc +1 more +3 moreServer Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management...4.7 Medium
- aubio, ffmpeg, ffmpeg libswresample +2 moreThe swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as...6.5 Medium
- aubioAubio is vulnerable to a NULL pointer dereference5.5 Medium
- linux kernel, suse linux enterprise server +1 moreThe usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in...6.6 Medium
- changyou dolphinThe Dolphin Browser for Android 12.0.2 suffers from an insecure parsing implementation of the...5.3 Medium
- google chromeInsufficient data validation in V8 builtins string generator could lead to out of bounds read and...8.8 High
- google chrome, debian linux, redhat enterprise linux desktop +2 more +4 moreOut-of-bounds Write in the QUIC networking stack in Google Chrome prior to 63.0.3239.84 allowed a...8.8 High
- acdsee ultimateA memory corruption vulnerability exists in the .PSD parsing functionality of ACDSee Ultimate 10...8.8 High
- cognitoys stemosaur firmwareElemental Path's CogniToys Dino smart toys through firmware version 0.0.794 use AES-128 with ECB...5.9 Medium
- cognitoys stemosaur firmwareElemental Path's CogniToys Dino smart toys through firmware version 0.0.794 share a fixed small...5.9 Medium
- cognitoys stemosaur firmwareElemental Path's CogniToys Dino smart toys through firmware version 0.0.794 do not provide...5.9 Medium
- ibm mq, websphere mq +1 moreIBM WebSphere MQ 7.5, 8.0, and 9.0 could allow a local user to crash the queue manager agent...7.1 High
- hclsoftware connections, ibm connections engagement center +1 moreIBM Connections Engagement Center 6.0 is vulnerable to cross-site scripting. This vulnerability...5.4 Medium
- ibm sterling file gatewayIBM Sterling File Gateway 2.2 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- hclsoftware connectionsIBM Connections 6.0 could allow an unauthenticated remote attacker to gain unauthenticated or...5.3 Medium
- ibm financial transaction managerIBM Financial Transaction Manager (FTM) for Multi-Platform (MP) 3.0.0.0 through 3.0.0.7 is...8.8 High
- node.jsNode.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the...3.1 Low
- Show moreLoading…