CVEs published in December 2017
1,146 vulnerabilities, 220 critical, 2 exploited.
- shutterstock clone project cloneFS Shutterstock Clone 1.0 has SQL Injection via the /Category keywords parameter.9.8 Critical
- grubhub clone project cloneFS Grubhub Clone 1.0 has SQL Injection via the /food keywords parameter.9.8 Critical
- quibids clone project cloneFS Quibids Clone 1.0 has SQL Injection via the itechd.php productid parameter.9.8 Critical
- linkedin clone project cloneFS Linkedin Clone 1.0 has SQL Injection via the group.php grid parameter, profile.php fid...9.8 Critical
- freelancer clone project cloneFS Freelancer Clone 1.0 has SQL Injection via the profile.php u parameter.9.8 Critical
- crowdfunding script project scriptFS Crowdfunding Script 1.0 has SQL Injection via the latest_news_details.php id parameter.9.8 Critical
- trademe clone project cloneFS Trademe Clone 1.0 has SQL Injection via the search_item.php search parameter or the...9.8 Critical
- gigs script project scriptFS Gigs Script 1.0 has SQL Injection via the browse-category.php cat parameter, browse-scategory...9.8 Critical
- groupon clone project cloneFS Groupon Clone 1.0 has SQL Injection via the item_details.php id parameter or the...9.8 Critical
- care clone project cloneFS Care Clone 1.0 has SQL Injection via the searchJob.php jobType or jobFrequency parameter.9.8 Critical
- fortunescripts ebay cloneFS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php...9.8 Critical
- amazon clone project cloneFS Amazon Clone 1.0 has SQL Injection via the PATH_INFO to /VerAyari.9.8 Critical
- foodpanda clone project cloneFS Foodpanda Clone 1.0 has SQL Injection via the /food keywords parameter.9.8 Critical
- expedia clone project cloneFS Expedia Clone 1.0 has SQL Injection via the pages.php or content.php id parameter, or the show...9.8 Critical
- scubez posty readymade classifiedsScubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.6.1 Medium
- scubez posty readymade classifiedsScubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin...7.5 High
- scubez posty readymade classifiedsScubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID...7.5 High
- mikrotik router firmwareMikroTik v6.40.5 devices allow remote attackers to cause a denial of service via a flood of ICMP...7.5 High
- tibco tibbr, tibco software inc. tibbr community, tibbr enterprise +2 moreImproper sandboxing of a third-party component in tibbr8.8 High
- tibco tibbr, tibco software inc. tibbr community, tibbr enterprise +2 moreSAML protocol handling errors in tibbr8.1 High
- vmware airwatch consoleVMware AirWatch Console (AWC) contains a Broken Access Control vulnerability. Successful...4.9 Medium
- micro focus project and portfolio management center, microfocus project and portfolio management +1 moreMFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilities7.3 High
- micro focus project and portfolio management center, microfocus project and portfolio management +1 moreMFSBGN03793 rev.1 - Project and Portfolio Management Center, Multiple vulnerabilities7.4 High
- wolfssl, arubanetworks instant, siemens scalance w1750d firmware +2 morewolfSSL Bleichenbacher/ROBOT7.5 High
- legion of the bouncy castle bouncycastle tls, bouncycastle bc-java +1 moreBouncyCastle JCE TLS Bleichenbacher/ROBOT7.5 High
xrdpDebianxrdp - regression updateNo score- exiv2, canonical ubuntu linux, debian linux +2 moreThere is a heap-based buffer over-read in the Exiv2::Internal::PngChunk::keyTXTChunk function of...5.5 Medium
- libraw, canonical ubuntu linux +1 moreAn error within the "LibRaw::xtrans_interpolate()" function (internal/dcraw_common.cpp) in LibRaw...6.5 Medium
- libraw, canonical ubuntu linux +1 moreAn error related to the "LibRaw::panasonic_load_raw()" function (dcraw_common.cpp) in LibRaw...8.8 High
- gnu glibcA buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the...7.0 High
- gnu glibcA memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the...7.8 High
- xenAn issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of...7.8 High
- xenAn issue was discovered in Xen through 4.9.x allowing PV guest OS users to cause a denial of...5.6 Medium
- xenAn issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service...7.8 High
- xenAn issue was discovered in Xen through 4.9.x allowing guest OS users to cause a denial of service...7.8 High
- microsoft officeMicrosoft Office 2016 Click-to-Run (C2R) allows an information disclosure vulnerability due to...6.5 Medium
- microsoft sharepoint, sharepoint enterprise server +1 moreMicrosoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability due to...8.8 High
- microsoft officeMicrosoft Office 2016 Click-to-Run (C2R) allows a remote code execution vulnerability due to the...7.8 High
- microsoft officeMicrosoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an...5.5 Medium
- microsoft exchange serverMicrosoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing...8.1 High
- microsoft chakracore, internet explorer, microsoft corporation chakracore, internet explorer +2 moreChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows...7.5 High
- microsoft windows 10, windows 7, windows 8.1 +6 more +8 moreWindows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012...6.5 Medium
- microsoft chakracore, edge, internet explorer +1 more +3 moreChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows...5.3 Medium
- microsoft chakracore, edge, microsoft corporation chakracore, microsoft edge +2 moreChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016...7.5 High
- microsoft chakracoreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge, microsoft corporation chakracore, microsoft edge +2 moreChakraCore vulnerable to privilege escalation due to exposure from scriptFunction7.5 High
- microsoft internet explorerInternet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and...7.5 High
- microsoft chakracore, edge, internet explorer +1 more +3 moreChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1,...7.5 High
- microsoft chakracore, edge, microsoft corporation chakracore, microsoft edge +2 moreChakraCore RCE Vulnerability7.5 High
- microsoft chakracore, edge, microsoft corporation chakracore, microsoft edge +2 moreChakraCore vulnerable to remote code execution due to insufficient InlineCache check7.5 High
- Show moreLoading…