# CVEs published 2017-12-03 8 CVEs were published on December 3, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-17099](https://cve.now/CVE-2017-17099.md): There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. (no CVSS) - [CVE-2017-17096](https://cve.now/CVE-2017-17096.md): Cross-site scripting (XSS) vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary (no CVSS) - [CVE-2017-14516](https://cve.now/CVE-2017-14516.md): Cross-Site Scripting (XSS) exists in SAP Business Objects Financial Consolidation before 2017-06-13, aka SAP Security Note 2422292. (no CVSS) - [CVE-2017-8819](https://cve.now/CVE-2017-8819.md): In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, the rep (no CVSS, Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0…) - [CVE-2017-8820](https://cve.now/CVE-2017-8820.md): In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, remote (no CVSS, Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0…) - [CVE-2017-8821](https://cve.now/CVE-2017-8821.md): In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, an atta (no CVSS, Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0…) - [CVE-2017-8822](https://cve.now/CVE-2017-8822.md): In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, relays (no CVSS, Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0…) - [CVE-2017-8823](https://cve.now/CVE-2017-8823.md): In Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0.2.9 before 0.2.9.14, 0.3.0 before 0.3.0.13, and 0.3.1 before 0.3.1.9, there i (no CVSS, Tor before 0.2.5.16, 0.2.6 through 0.2.8 before 0.2.8.17, 0…) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-12-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.