CVEs published in December 2017
1,146 vulnerabilities, 220 critical, 2 exploited.
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software...7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM,...8.1 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +11 more +13 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM,...7.5 High
- f5 big-ip advanced firewall manager, big-ip analytics, big-ip application acceleration manager +6 more +8 moreOn the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION...7.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn F5 BIG-IP APM software version 13.0.0 and 12.1.2, under rare conditions, the BIG-IP APM system...5.9 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +9 more +11 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe...7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +9 more +11 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe...5.9 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +9 more +11 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe...7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +9 more +11 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe...6.5 Medium
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +8 more +10 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software...7.5 High
- f5 big-ip access policy manager, big-ip advanced firewall manager, big-ip analytics +9 more +11 moreIn F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe...7.5 High
- f5 big-ip apm, big-ip access policy manager +1 moreIn F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN...7.5 High
- f5 big-ip afm, big-ip advanced firewall manager +1 moreA SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0,...5.4 Medium
- f5 big-ip apm, big-ip access policy manager +1 moreIn F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0...7.6 High
- ibm rational collaborative lifecycle management, rational quality manager +1 moreIBM Rational Quality Manager and IBM Rational Collaborative Lifecycle Management 5.0 through 5.0...5.4 Medium
- qnap qts, qts notification function +1 moreA buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4...9.8 Critical
- qnap qts, qts password function +1 moreA buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4...9.8 Critical
- qnap qts, qts password function +1 moreA buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4...9.8 Critical
- qnap qts, qts login function +1 moreA buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3...9.8 Critical
- qnap qts, qts login function +1 moreA buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3...9.8 Critical
- qnap qts, qts external device function +1 moreA buffer overflow vulnerability in external device function in QNAP QTS version 4.2.6 build...9.8 Critical
- qnap qts, qts ftp service +1 moreA buffer overflow vulnerability in FTP service in QNAP QTS version 4.2.6 build 20171026, 4.3.3...9.8 Critical
- puppet puppetlabs-mysqlpuppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by...9.8 Critical
- puppet enterprisePuppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates...6.8 Medium
- linksys wvbr0, wvbr0 firmware +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...9.8 Critical
- bitdefender internet security, internet security 2018 +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- bitdefender internet security, internet security 2018 +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- bitdefender internet security, internet security 2018 +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- git large file storage project large file storageGitHub Git LFS Arbitrary command execution vulnerability8.8 High
- doditsolutions bus booking scriptBus Booking Script has CSRF via admin/new_master.php.6.8 Medium
- doditsolutions bus booking scriptBus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the...7.2 High
- doditsolutions busbooking-scriptBus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php...4.8 Medium
- piwigoPiwigo 2.9.2 is vulnerable to Cross-Site Request Forgery via /admin.php?page=configuration...8.8 High
- piwigoThe Configuration component of Piwigo 2.9.2 is vulnerable to Persistent Cross Site Scripting via...6.1 Medium
- piwigoThe Batch Manager component of Piwigo 2.9.2 is vulnerable to Persistent Cross Site Scripting via...4.8 Medium
- piwigoThe Batch Manager component of Piwigo 2.9.2 is vulnerable to SQL Injection via the admin...4.9 Medium
- piwigoThe Configuration component of Piwigo 2.9.2 is vulnerable to SQL Injection via the admin...4.9 Medium
- piwigoThe List Users API of Piwigo 2.9.2 is vulnerable to SQL Injection via the /admin...4.9 Medium
- apple safariWTF/wtf/FastBitVector.h in WebKit, as distributed in Safari Technology Preview Release 46, allows...9.8 Critical
- enigmail, debian linux +1 moreAn issue was discovered in Enigmail before 1.9.9. In a variant of CVE-2017-17847, signature...7.5 High
- enigmail, debian linux +1 moreAn issue was discovered in Enigmail before 1.9.9. Signature spoofing is possible because the UI...7.5 High
- enigmail, debian linux +1 moreAn issue was discovered in Enigmail before 1.9.9. Regular expressions are exploitable for Denial...7.5 High
- enigmail, debian linux +1 moreAn issue was discovered in Enigmail before 1.9.9. Improper Random Secret Generation occurs...7.3 High
- enigmail, debian linux +1 moreAn issue was discovered in Enigmail before 1.9.9. A remote attacker can obtain cleartext content...6.5 Medium
- enigmail, debian linux +1 moreAn issue was discovered in Enigmail before 1.9.9 that allows remote attackers to trigger use of...5.9 Medium
- goldenfrog vyprvpnIn Golden Frog VyprVPN before 2.15.0.5828 for macOS, the vyprvpnservice launch daemon has an...7.8 High
- emc isilon onefsThe NFS service in EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, and 8.0.0.0 - 8.0.0.4 maintains...6.5 Medium
- emc data domain, data domain os +1 moreAn issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data...7.5 High
- cambium networks cnpilot, cambiumnetworks cnpilot e400 firmware, cnpilot e410 firmware +3 more +5 moreVersions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware lack CSRF controls that can...8.0 High
- cambium networks cnpilot, cambiumnetworks cnpilot e400 firmware, cnpilot e410 firmware +3 more +5 moreIn versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO)...8.0 High
- Show moreLoading…