CVEs published November 18, 2017
4 CVEs were published on November 18, 2017: 0 critical, 0 high.
- Published
- 4
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- dapphp/securimage
- 1
Medium, low and unrated 4
- CVE-2017-16882Icinga Core through 1.14.0 initially executes bin/icinga as root but supports configuration options in which this file is owned by a non-roo
- CVE-2017-16883The outputSWF_TEXT_RECORD function in util/outputscript.c in libming <= 0.4.8 is vulnerable to a NULL pointer dereference, which may allow a
- CVE-2017-16881b3log Symphony (aka Sym) 2.2.0 does not properly address XSS in JSON objects, as demonstrated by a crafted userAvatarURL value to /settings/
- CVE-2017-14077HTML Injection in Securimage 3.6.4 and earlier allows remote attackers to inject arbitrary HTML into an e-mail message body via the $_SERVERdapphp/securimage