CVEs published in December 2017
1,146 vulnerabilities, 220 critical, 2 exploited.
- tgsoft vir.it explorerIn TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to...7.8 High
- tgsoft vir.it explorerIn TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to...7.8 High
- tgsoft vir.it explorerIn TG Soft Vir.IT eXplorer Lite 8.5.42, the driver file (VIRAGTLT.SYS) allows local users to...7.8 High
- ikarussecurity anti.virusIn IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial...7.8 High
- tgsoft vir.it explorer liteIn TG Soft Vir.IT eXplorer Lite 8.5.65, the driver file (VIRAGTLT.SYS) allows local users to...7.8 High
- ikarussecurity anti.virusIn IKARUS anti.virus 2.16.20, the driver file (ntguard.SYS) allows local users to cause a denial...7.8 High
- blogotext project blogotextvalidate_form_preferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to...9.8 Critical
- blogotext project blogotextInformation Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText...7.5 High
- blogotext project blogotextCross site scripting (XSS) vulnerability in the markup_clean_href function in inc/conv.php in...6.1 Medium
- graphicsmagick, debian linux +1 moreIn GraphicsMagick 1.3.27a, there is a buffer over-read in ReadPALMImage in coders/palm.c when...7.5 High
- graphicsmagick, debian linux +1 moreIn GraphicsMagick 1.3.27a, there is a heap-based buffer over-read in ReadOneJNGImage in coders...8.8 High
- mediaburst formidable, gravity forms, two-factor authentication +5 more +7 moreThe Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a...6.1 Medium
- paid to read script project to read scriptPaid To Read Script 2.0.5 has SQL injection via the referrals.php id parameter.9.8 Critical
- paid to read script project to read scriptPaid To Read Script 2.0.5 has XSS via the referrals.php tier parameter or the admin/userview.php...4.8 Medium
- paid to read script project to read scriptPaid To Read Script 2.0.5 has authentication bypass in the admin panel via a direct request, as...9.8 Critical
- paid to read script project to read scriptPaid To Read Script 2.0.5 has full path disclosure via an invalid admin/userview.php uid parameter.5.3 Medium
- piwigoPiwigo 2.9.2 has XSS via the name parameter in an admin.php?page=album-3-properties request.6.1 Medium
- piwigoadmin/configuration.php in Piwigo 2.9.2 has CSRF.8.8 High
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11...8.8 High
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm...5.5 Medium
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc()...5.5 Medium
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a...7.5 High
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that...5.5 Medium
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c...5.5 Medium
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm...5.5 Medium
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c...5.5 Medium
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function...5.5 Medium
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function...5.5 Medium
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a...5.5 Medium
- nasm netwide assembler, canonical ubuntu linux +1 moreIn Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a...5.5 Medium
- linux kernelThe KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding...3.3 Low
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +4 more +6 moreThe Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero...7.8 High
- ruby-lang rubyThe lazy_initialize function in lib/resolv.rb in Ruby through 2.4.3 uses Kernel#open, which might...9.8 Critical
- gimp, canonical ubuntu linux, debian linux +2 moreIn GIMP 2.8.22, there is a heap-based buffer overflow in read_channel_data in plug-ins/common...7.8 High
- gimp, canonical ubuntu linux, debian linux +2 moreIn GIMP 2.8.22, there is a stack-based buffer over-read in xcf_load_stream in app/xcf/xcf.c when...5.5 Medium
- gimp, canonical ubuntu linux, debian linux +2 moreIn GIMP 2.8.22, there is a heap-based buffer over-read in read_creator_block in plug-ins/common...7.8 High
- gimp, canonical ubuntu linux, debian linux +2 moreIn GIMP 2.8.22, there is a heap-based buffer over-read in ReadImage in plug-ins/common/file-tga.c...7.8 High
- gimp, canonical ubuntu linux, debian linux +2 moreIn GIMP 2.8.22, there is a heap-based buffer overflow in the fli_read_brun function in plug-ins...7.8 High
- gimp, canonical ubuntu linux, debian linux +2 moreIn GIMP 2.8.22, there is a heap-based buffer over-read in load_image in plug-ins/common/file-gbr...7.8 High
- otrs, debian linux +1 moreOpen Ticket Request System (OTRS) 4.0.x before 4.0.28, 5.0.x before 5.0.26, and 6.0.x before 6.0...8.8 High
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11...8.8 High
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11...8.8 High
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11...8.8 High
- liveqos superbeamSuperBeam through 4.1.3, when using the LAN or WiFi Direct Share feature, does not use HTTPS or...7.5 High
- ichano athome ip camera firmwareAn issue was discovered on Ichano AtHome IP Camera devices. The device runs the "noodles" binary ...9.8 Critical
- csv-import-export project csv-import-exportMultiple cross-site scripting (XSS) vulnerabilities in the esb-csv-import-export plugin through 1...6.1 Medium
- webdesi9 custom mapA cross-site scripting (XSS) vulnerability in the custom-map plugin through 1.1 for WordPress...6.1 Medium
- olyos wp-concoursA cross-site scripting (XSS) vulnerability in the wp-concours plugin through 1.1 for WordPress...6.1 Medium
- redhat jbpmMultiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote...5.4 Medium
- Show moreLoading…