CVEs published in December 2017
1,146 vulnerabilities, 220 critical, 2 exploited.
- cambium networks cnpilot, cambiumnetworks cnpilot e400 firmware, cnpilot e410 firmware +3 more +5 moreIn versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute'...8.8 High
- cambium networks cnpilot, cambiumnetworks cnpilot e400 firmware, cnpilot e410 firmware +3 more +5 moreIn versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to...8.8 High
- cambium networks cnpilot, cambiumnetworks cnpilot e400 firmware, cnpilot e410 firmware +3 more +5 moreIn versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root...8.8 High
- cambium networks epmp, cambiumnetworks epmp 1000 firmware, epmp 2000 firmware +2 moreIn version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows or can guess...5.4 Medium
- cambium networks epmp, cambiumnetworks epmp 1000 firmware, epmp 2000 firmware +2 moreIn version 3.5 and prior of Cambium Networks ePMP firmware, an attacker who knows (or guesses)...5.4 Medium
- cambium networks epmp, cambiumnetworks epmp 1000 firmware, epmp 2000 firmware +2 moreIn version 3.5 and prior of Cambium Networks ePMP firmware, all authenticated users have the...5.4 Medium
- cambium networks epmp, cambiumnetworks epmp 1000 firmware, epmp 2000 firmware +2 moreIn version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for...8.8 High
- cambium networks epmp, cambiumnetworks epmp 1000 firmware, epmp 2000 firmware +2 moreIn version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users ...8.8 High
- bsuite project bsuiteMultiple cross-site scripting (XSS) vulnerabilities in ui_stats.php in the bSuite plugin before 5...6.1 Medium
- solarwinds backup profiler, storage manager, storage profiler +2 moreSQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2,...9.8 Critical
- genexis gapsCPEs used by subscribers on the access network receive their individual configuration settings...9.8 Critical
- tp-link tl-sg108e firmwareWeak access controls in the Device Logout functionality on the TP-Link TL-SG108E v1.0.0 allow...6.5 Medium
- tp-link tl-sg108e firmwareWeak access control methods on the TP-Link TL-SG108E 1.0.0 allow any user on a NAT network with...6.8 Medium
- tp-link tl-sg108e firmwareCross-site scripting (XSS) vulnerability in system_name_set.cgi in TP-Link TL-SG108E 1.0.0 allows...5.4 Medium
- ecava integraxorA SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL...5.3 Medium
- ecava integraxorA SQL Injection issue was discovered in Ecava IntegraXor v 6.1.1030.1 and prior. The SQL...5.3 Medium
- hitachienergy ellipseAn Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8...8.8 High
- xiongmaitech ahb7004t-g-v4 firmware, ahb7004t-gl-v4 firmware, ahb7004t-gs-v3 firmware +133 more +135 moreA Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs...9.8 Critical
- we-con levi studio hmiA Heap-based Buffer Overflow issue was discovered in WECON LeviStudio HMI. The heap-based buffer...8.6 High
- ibm security guardiumIBM Security Guardium 10.0 is vulnerable to SQL injection. A remote attacker could send specially...8.8 High
- ibm robotic process automation with automation anywhereIBM Robotic Process Automation with Automation Anywhere 10.0.0 is vulnerable to cross-site...5.4 Medium
- ibm jazz for service management, tivoli components +1 moreIBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request...8.8 High
- ibm qradar security information and event manager, security qradar siem +1 moreIBM QRadar 7.2 and 7.3 could allow a remote authenticated attacker to execute arbitrary commands...8.8 High
- ibm integration busIBM Integration Bus 9.0 and 10.0 transmits user credentials in plain in clear text which can be...8.1 High
- ibm jazz for service management, tivoli components +1 moreIBM Jazz for Service Management (IBM Tivoli Components 1.1.3) is vulnerable to cross-site request...8.8 High
- ibm security guardiumIBM Security Guardium 10.0 Database Activity Monitor is vulnerable to cross-site scripting. This...5.4 Medium
- ibm security guardiumIBM Security Guardium 10.0 Database Activity Monitor uses weaker than expected cryptographic...7.5 High
- ibm security guardiumIBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain...5.5 Medium
- ibm security guardiumIBM Security Guardium 10.0 Database Activity Monitor could allow a local attacker to obtain...5.5 Medium
- symantec messaging gatewayPrior to 10.6.4, Symantec Messaging Gateway may be susceptible to a path traversal attack (also...5.7 Medium
- ikarussecurity anti.virusIn IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write...7.8 High
- ikarussecurity anti.virusIn IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write...7.8 High
- ikarussecurity anti.virusIn IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write...7.8 High
- ikarussecurity anti.virusIn IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write...7.8 High
- ikarussecurity anti.virusIn IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write...7.8 High
- ikarussecurity anti.virusIn IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write...7.8 High
- ikarussecurity anti.virusIn IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Arbitrary Write...7.8 High
- ikarussecurity anti.virusIn IKARUS anti.virus before 2.16.18, the ntguard.sys driver contains an Out of Bounds Write...7.8 High
- ibm business process manager, business process manager advanced +1 moreIBM Business Process Manager 8.5 is vulnerable to cross-site scripting. This vulnerability allows...5.4 Medium
- ibm websphere portalIBM WebSphere Portal 8.5 and 9.0 exposes backend server URLs that are configured for usage by the...5.3 Medium
- ibm security guardiumIBM Security Guardium 10.0 does not renew a session variable after a successful authentication...3.3 Low
- ibm security guardiumIBM Security Guardium 10.0 specifies permissions for a security-critical resource in a way that...5.4 Medium
- ibm security guardiumIBM Security Guardium 10.0 is vulnerable to HTTP response splitting attacks. A remote attacker...6.1 Medium
- ibm security guardiumIBM Security Guardium 10.0 stores potentially sensitive information in log files that could be...3.3 Low
- ibm security guardiumIBM Security Guardium 10.0 discloses sensitive information to unauthorized users. The information...4.3 Medium
- qnap systems inc. photo stationCross-site scripting (XSS) vulnerability in PixlrEditorHandler.php in Synology Photo Station...5.4 Medium
- redhat ceph, fedoraproject fedora +1 moreRADOS Gateway in Ceph 12.1.0 through 12.2.1 allows remote authenticated users to cause a denial...6.5 Medium
- codecrafters ability mail serverAbility Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with...6.1 Medium
- vmware vcenter server appliance (vcsa), vcenter server +1 moreVMware vCenter Server Appliance (vCSA) (6.5 before 6.5 U1d) contains a local privilege escalation...7.8 High
- vmware esxi, fusion, workstation +2 moreVMware ESXi (6.0 before ESXi600-201711101-SG, 5.5 ESXi550-201709101-SG), Workstation (12.x before...8.8 High
- Show moreLoading…