CVEs published in December 2017
1,146 vulnerabilities, 220 critical, 2 exploited.
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10...5.5 Medium
- apple icloud, itunes +1 moreAn issue was discovered in certain Apple products. iCloud before 7.2 on Windows is affected....5.9 Medium
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10...7.8 High
- apple tvos, watchos, iphone os +2 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2...7.8 High
- apple iphone os, mac os x +1 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10...5.9 Medium
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue...7.8 High
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10...5.5 Medium
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue...7.8 High
- apple iphone os, mac os x +1 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10...7.8 High
- responsive realestate script project realestate scriptPHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter.4.8 Medium
- responsive realestate script project realestate scriptPHP Scripts Mall Responsive Realestate Script has CSRF via admin/general.8.8 High
- car rental script project rental scriptPHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the...6.1 Medium
- car rental script project rental scriptPHP Scripts Mall Car Rental Script has SQL Injection via the admin/carlistedit.php carid parameter.9.8 Critical
- car rental script project rental scriptPHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php.8.8 High
- fortunescripts lynda cloneFS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name...5.4 Medium
- fortunescripts lynda cloneFS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel.8.8 High
- dolibarr erp\/crmDolibarr SQL injection vulnerability in fourn/index.php9.8 Critical
- dolibarr erp\/crmDolibarr SQL injection vulnerability in adherents/subscription/info.php9.8 Critical
- dolibarr erp\/crmDolibarr sensitive information disclosure7.5 High
- dolibarr erp\/crmDolibarr SQL injection vulnerability in comm/multiprix.php9.8 Critical
- basic job site script project job site scriptReadymade Job Site Script has XSS via the keyword parameter to the /job URI.6.1 Medium
- basic job site script project job site scriptReadymade Job Site Script has SQL Injection via the location_name array parameter to the /job URI.9.8 Critical
- basic job site script project job site scriptReadymade Job Site Script has CSRF via the /job URI.8.8 High
- readymade video sharing script project video sharing scriptReadymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs...6.1 Medium
- readymade video sharing script project video sharing scriptReadymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the...9.8 Critical
- readymade video sharing script project video sharing scriptReadymade Video Sharing Script has CSRF via user-profile-edit.php.8.8 High
- getgosoft getgo download managerA buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow...9.8 Critical
- hoytech antiwebcgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance...8.8 High
- samsung internet browserSamsung Internet Browser 6.2.01.12 allows remote attackers to bypass the Same Origin Policy, and...6.1 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPICTImage...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-16 Q16, a memory leak vulnerability was found in the function...6.5 Medium
- imagemagickIn ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadPGXImage...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadXPMImage...6.5 Medium
- imagemagick, canonical ubuntu linux +1 moreIn ImageMagick 7.0.7-12 Q16, a memory leak vulnerability was found in the function ReadMATImage...6.5 Medium
- imagemagickIn ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a stack-based buffer over-read in...8.8 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.7-16 Q16 x86_64 2017-12-21, there is a heap-based buffer over-read in...8.8 High
- valvesoftware steam link firmwareAn issue was discovered in Valve Steam Link build 643. Root passwords longer than 8 characters...9.8 Critical
- valvesoftware steam link firmwareAn issue was discovered in Valve Steam Link build 643. When the SSH daemon is enabled for local...9.8 Critical
- mozilla thunderbird, debian linux, redhat enterprise linux +5 more +7 moreRSS fields can inject new lines into the created email structure, modifying the message body....5.3 Medium
- mozilla thunderbird, debian linux, redhat enterprise linux aus +4 more +6 moreCrafted CSS in an RSS feed can leak and reveal local path strings, which may contain user name....4.3 Medium
- mozilla thunderbird, debian linux, redhat enterprise linux desktop +4 more +6 moreIt is possible to execute JavaScript in the parsed RSS feed when RSS feed is viewed as a website,...8.8 High
- mozilla thunderbird, canonical ubuntu linux, debian linux +5 more +7 moreIt is possible to spoof the sender's email address and display an arbitrary sender address to the...5.3 Medium
- vanguard project marketplace digital products phpVanguard Marketplace Digital Products PHP 1.4 allows arbitrary file upload via an "Add a new...8.8 High
- vanguard project marketplace digital products phpVanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.9.8 Critical
- jextn video galleryThe JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a...9.8 Critical
- jextn question and answerThe "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an...9.8 Critical
- jbuildozerThe JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an...9.8 Critical
- mgl-instagram-gallery project mgl-instagram-galleryThe mgl-instagram-gallery plugin for WordPress has XSS via the single-gallery.php media parameter.6.1 Medium
- Show moreLoading…