CVEs published in December 2017
1,146 vulnerabilities, 220 critical, 2 exploited.
- liferay portalIn Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter (p_r_p) value, as...6.1 Medium
- auth0 passport-wsfed-saml2passport-wsfed-saml2 vulnerable to Signature Bypass in SAML2 token8.1 High
- artifex mupdf, debian linux +1 morepdf/pdf-write.c in Artifex MuPDF before 1.12.0 mishandles certain length changes when a repair...7.8 High
- debian linux, linux kernel +1 moreThe check_stack_boundary function in kernel/bpf/verifier.c in the Linux kernel through 4.14.8...7.8 High
- debian linux, linux kernel +1 morekernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of...7.8 High
- debian linux, linux kernel +1 morekernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of...7.8 High
- debian linux, linux kernel +1 morekernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of...7.8 High
- debian linux, linux kernel +1 morekernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of...7.8 High
- debian linux, linux kernel +1 morekernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of...7.8 High
- debian linux, linux kernel +1 morekernel/bpf/verifier.c in the Linux kernel through 4.14.8 mishandles states_equal comparisons...3.3 Low
- debian linux, linux kernel +1 morekernel/bpf/verifier.c in the Linux kernel 4.9.x through 4.9.71 does not check the relationship...7.8 High
- debian linux, linux kernel +1 morekernel/bpf/verifier.c in the Linux kernel through 4.14.8 ignores unreachable code, even though it...5.5 Medium
- digium asterisk, certified asterisk +1 moreAn issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13...7.5 High
- rockwellautomation factorytalk alarms and eventsAn Improper Input Validation issue was discovered in Rockwell Automation FactoryTalk Alarms and...7.5 High
- serverscheck monitoring softwareServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability...5.4 Medium
- huawei technologies co., ltd. hg8245h, huawei hg8245h firmware +1 moreHuawei HG8245H version earlier than V300R018C00SPC110 has an authentication bypass vulnerability....7.5 High
- huawei technologies co., ltd. s5700, s6700, huawei s5700 firmware +6 more +8 moreHuawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient...7.5 High
- huawei baggio-l03a firmware, huawei technologies co., ltd. baggio-l03a +1 moreSome Huawei smartphones with software of BGO-L03C158B003CUSTC158D001 and BGO...6.5 Medium
- huawei fusionsphere openstackHuawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due...3.7 Low
- huawei te30, te40, te50 +7 more +9 moreRP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00,...7.5 High
- huawei te30, te40, te50 +7 more +9 moreRP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00,...7.5 High
- huawei te30, te40, te50 +7 more +9 moreRP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00,...7.5 High
- huawei ar120-s, ar1200, ar1200-s +27 more +29 moreAR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13,...7.5 High
- huawei mate 9 pro, huawei technologies co., ltd. mate 9, huawei mate 9 firmware +1 more +3 moreThe GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and...7.8 High
- huawei smartcareHuawei SmartCare V200R003C10 has a CSV injection vulnerability. An remote authenticated attacker...8.8 High
- huawei smartcareHuawei SmartCare V200R003C10 has a stored XSS (cross-site scripting) vulnerability in the...5.4 Medium
- huawei mate 10, mate 9 pro, huawei technologies co., ltd. mate 10 pro +5 more +7 moreThe baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with...8.8 High
- huawei ireaderHuawei iReader app before 8.0.2.301 has an arbitrary file deletion vulnerability due to the lack...6.5 Medium
- huawei ireaderHuawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient...7.1 High
- huawei ireaderHuawei iReader app before 8.0.2.301 has an input validation vulnerability due to insufficient...8.8 High
- huawei technologies co., ltd. honor 8, huawei honor 8 firmware +1 moreHuawei Honor 8 smartphone with software versions earlier than FRD-L04C567B389 and earlier than...2.3 Low
enigmailSUSESecurity update for enigmailNo scoreenigmailSUSESecurity update for enigmailNo score- sony content manager assistant, sony interactive entertainment inc. content manager assistant for playstation +1 moreUntrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55...7.8 High
- synology diskstation manager (dsm), diskstation manager +1 moreAn improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM)...6.5 Medium
- sony music center, sony video & sound products inc. music center for pc +1 moreUntrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an...7.8 High
- dena h2oH2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server...7.5 High
- spiqe onethird cms show off, spiqe software onethird cms +1 moreDirectory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. Show Off v1.85 en...4.3 Medium
- dena h2oH2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server...6.5 Medium
- dena h2oBuffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of...7.5 High
- dena h2oH2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server...7.5 High
- debian linux, linux kernel +1 morekernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of...7.8 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreThe check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local...7.8 High
- open-iscsi project open-iscsiAn issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio...7.8 High
- moxa nport w2150a firmware, nport w2250a firmware +1 moreA Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and...9.1 Critical
- micro focus operations manager iMFSBGN03795 rev.1 - Micro Focus Operations Manager i - Remote Cross-Site Scripting (XSS)5.9 Medium
- samsung internet browserSamsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and...7.5 High
rootcertsMageia,nssMageia +1 moreUpdated rootcerts packages fix security vulnerabilityNo scoregraphicsmagickMageiaUpdated graphicsmagick packages fix security vulnerabilitiesNo score- isc dhcp, canonical ubuntu linux, debian linux +6 more +8 moreFailure to properly clean up closed OMAPI connections can exhaust available sockets5.3 Medium
- Show moreLoading…