CVEs published in December 2017
1,146 vulnerabilities, 220 critical, 2 exploited.
- phpmybackupproSQL injection vulnerability in phpMyBackupPro when run in multi-user mode before 2.5 allows...8.1 High
- airlive bu-2015 firmware, bu-3026 firmware, md-3025 firmware +2 more +4 morecgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026...9.8 Critical
- synology mailplus serverCross-site scripting (XSS) vulnerability in User Policy editor in Synology MailPlus Server before...4.8 Medium
- tracker-software pdf-xchange viewerThe launchURL function in PDF-XChange Viewer 2.5 (Build 314.0) might allow remote attackers to...7.8 High
- ui unifi videoUbiquiti UniFi Video before 3.8.0 for Windows uses weak permissions for the installation...7.8 High
- ibm websphere portalIBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could reveal sensitive information from an error...5.3 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreIBM Team Concert (RTC including IBM Rational Collaborative Lifecycle Management 4.0, 5.0., and 6...5.4 Medium
- ibm rational collaborative lifecycle management, rational doors next generation, rational engineering lifecycle manager +4 more +6 moreAn undisclosed vulnerability in CLM applications (including IBM Rational Collaborative Lifecycle...4.3 Medium
gdk-pixbufSUSESecurity update for gdk-pixbufNo score- wireshark, debian linux +1 moreThe File_read_line function in epan/wslua/wslua_file.c in Wireshark through 2.2.11 does not...7.5 High
- imagemagick, canonical ubuntu linux +1 moreImageMagick 7.0.7-17 Q16 x86_64 has memory leaks in coders/msl.c, related to MSLPopImage and...6.5 Medium
- resume clone script project clone scriptPHP Scripts Mall Resume Clone Script has SQL Injection via the forget.php username parameter.9.8 Critical
- ordermanagementscript professional service scriptPHP Scripts Mall Professional Service Script has CSRF via admin/general_settingupd.php, as...8.8 High
- ordermanagementscript professional service scriptPHP Scripts Mall Professional Service Script has XSS via the admin/bannerview.php view parameter.4.8 Medium
- ordermanagementscript professional service scriptPHP Scripts Mall Professional Service Script has SQL injection via the admin/review.php id...9.8 Critical
- ordermanagementscript professional service scriptPHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full...5.3 Medium
- ordermanagementscript professional service scriptPHP Scripts Mall Professional Service Script has a predicable registration URL, which makes it...5.3 Medium
- ordermanagementscript professional service scriptPHP Scripts Mall Professional Service Script has XSS via the admin/general_settingupd.php...4.8 Medium
- ordermanagementscript professional service scriptPHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full...5.3 Medium
- graphicsmagick, debian linux +1 moreIn GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in...8.8 High
- imagemagick, canonical ubuntu linux, debian linux +2 moreIn ImageMagick 7.0.7-16 Q16, a vulnerability was found in the function ReadOnePNGImage in coders...6.5 Medium
- graphicsmagick, debian linux +1 moreIn GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in...8.8 High
- graphicsmagick, debian linux +1 moreIn GraphicsMagick 1.4 snapshot-20171217 Q8, there is a heap-based buffer over-read in...8.8 High
- archonpackages/core/contact.php in Archon 3.21 rev-1 has XSS in the referer parameter in an index.php?p...6.1 Medium
- iwcnetwork shiftBiometric Shift Employee Management System 3.0 allows remote attackers to bypass intended file...7.5 High
- jextn faq proThe JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view...9.8 Critical
- siemens 7kt pac1200 data manager firmwareA vulnerability has been identified in Siemens 7KT PAC1200 data manager (7KT1260) in all versions...9.8 Critical
- siemens development/evaluation kits for profinet io: dk standard ethernet controller, development/evaluation kits for profinet io: ek-ertec 200, development/evaluation kits for profinet io: ek-ertec 200p +121 more +123 moreA vulnerability has been identified in Development/Evaluation Kits for PROFINET IO: DK Standard...8.7 High
- siemens logo\! soft comfortSiemens LOGO! Soft Comfort (All versions before V8.2) lacks integrity verification of software...5.9 Medium
- siemens ruggedcom ros, ruggedcom i800, ruggedcom i800nc +251 more +253 moreA vulnerability has been identified in RUGGEDCOM ROS for RSL910 devices (All versions < ROS V5.0...8.8 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue...7.8 High
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10...7.8 High
- apple icloud, itunes, safari +4 more +6 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11...8.8 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue...7.8 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue...6.5 Medium
- apple icloud, itunes, safari +3 more +5 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11...8.8 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue...7.8 High
- apple tvos, iphone os, mac os x +2 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10...6.6 Medium
- apple iphone osAn issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue...4.3 Medium
- apple tvos, iphone os +1 moreAn issue was discovered in certain Apple products. iOS before 11.2.1 is affected. tvOS before 11...7.5 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue...7.8 High
- apple iphone osAn issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue...7.8 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue...7.1 High
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10...7.8 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue...7.8 High
- apple iphone osAn issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue...7.5 High
- apple mac os xAn issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue...7.5 High
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10...5.5 Medium
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10...5.5 Medium
- apple tvos, watchos, iphone os +1 more +3 moreAn issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10...7.8 High
- Show moreLoading…