CVEs published December 6, 2017
56 CVEs were published on December 6, 2017: 0 critical, 0 high.
- Published
- 56
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 55
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- Google Android
- 38
- Nvidia Android
- 3
- auth0-js
- 1
- Dell Storage Manager 2016 Dell Storage Manager versions ear…
- 1
- org.jenkins-ci.main:jenkins-core
- 1
- Puppet Agent
- 1
- Red Hat Enterprise Linux
- 1
Medium, low and unrated 56
- CVE-2017-17068A cross-origin vulnerability has been discovered in the Auth0 auth0.js library affecting versions < 8.12.auth0-js
- CVE-2017-17446The Mem_File_Reader::read_avail function in Data_Reader.cpp in the Game_Music_Emu library (aka game-music-emu) 0.6.1 does not ensure a non-n
- CVE-2017-6262NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to a race condition which could enablNvidia Android
- CVE-2017-6263NVIDIA driver contains a vulnerability where it is possible a use after free malfunction can occur due to improper usage of the list_for_eacNvidia Android
- CVE-2017-6276NVIDIA mediaserver contains a vulnerability where it is possible a use after free malfunction can occur due to an incorrect bounds check whiNvidia Android
- CVE-2017-17440GNU Libextractor 1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted GIF
- CVE-2017-15121A non-privileged user is able to mount a fuse filesystem on RHEL 6 or 7 and crash a system if an application punches a hole in a file that dRed Hat Enterprise Linux
- CVE-2017-16884Cross-site scripting (XSS) vulnerability in MistServer before 2.13 allows remote attackers to inject arbitrary web script or HTML via vector
- CVE-2017-17055Artica Web Proxy before 3.06.112911 allows remote attackers to execute arbitrary code as root by conducting a cross-site scripting (XSS) att
- CVE-2017-17381The Virtio Vring implementation in QEMU allows local OS guest users to cause a denial of service (divide-by-zero error and QEMU process cras
- CVE-2016-5713Versions of Puppet Agent prior to 1.6.0 included a version of the Puppet Execution Protocol (PXP) agent that passed environment variables thPuppet Agent
- CVE-2017-17439In Heimdal through 7.4, remote unauthenticated attackers are able to crash the KDC by sending a crafted UDP packet containing empty data fie
- CVE-2017-0837An elevation of privilege vulnerability in the Android media framework (libaudiopolicymanager).Google Android
- CVE-2017-0870An elevation of privilege vulnerability in the Android framework (libminikin).Google Android
- CVE-2017-0871An elevation of privilege vulnerability in the Android framework (framework base).Google Android
- CVE-2017-0872A remote code execution vulnerability in the Android media framework (libskia).Google Android
- CVE-2017-0873A denial of service vulnerability in the Android media framework (libmpeg2).Google Android
- CVE-2017-0874A denial of service vulnerability in the Android media framework (libavc).Google Android
- CVE-2017-0876A remote code execution vulnerability in the Android media framework (libavc).Google Android
- CVE-2017-0877A remote code execution vulnerability in the Android media framework (libavc).Google Android
- CVE-2017-0878A remote code execution vulnerability in the Android media framework (libhevc).Google Android
- CVE-2017-0879An information disclosure vulnerability in the Android media framework (n/a).Google Android
- CVE-2017-0880A denial of service vulnerability in the Android media framework (libskia).Google Android
- CVE-2017-13148A denial of service vulnerability in the Android media framework (libmpeg2).Google Android
- CVE-2017-13149An information disclosure vulnerability in the Android media framework (n/a).Google Android
- CVE-2017-13150An information disclosure vulnerability in the Android media framework (n/a).Google Android
- CVE-2017-13151A remote code execution vulnerability in the Android media framework (libmpeg2).Google Android
- CVE-2017-13152An information disclosure vulnerability in the Android media framework (libmedia drm).Google Android
- CVE-2017-13153An elevation of privilege vulnerability in the Android media framework (libaudioservice).Google Android
- CVE-2017-13154An elevation of privilege vulnerability in the Android media framework (libstagefright).Google Android
- CVE-2017-13156An elevation of privilege vulnerability in the Android system (art).Google Android
- CVE-2017-13157An information disclosure vulnerability in the Android system (activitymanagerservice).Google Android
- CVE-2017-13158An information disclosure vulnerability in the Android system (activitymanagerservice).Google Android
- CVE-2017-13159An information disclosure vulnerability in the Android system (activitymanagerservice).Google Android
- CVE-2017-13160A remote code execution vulnerability in the Android system (bluetooth).Google Android
- CVE-2017-13161An elevation of privilege vulnerability in the Broadcom wireless driver.Google Android
- CVE-2017-13162An elevation of privilege vulnerability in the kernel binder.Google Android
- CVE-2017-13163An elevation of privilege vulnerability in the kernel mtp usb driver.Google Android
- CVE-2017-13164An information disclosure vulnerability in the kernel binder driver.Google Android
- CVE-2017-13165An elevation of privilege vulnerability in the kernel file system.Google Android
- CVE-2017-13166An elevation of privilege vulnerability in the kernel v4l2 video driver.Google Android
- CVE-2017-13167An elevation of privilege vulnerability in the kernel sound timer.Google Android
- CVE-2017-13168An elevation of privilege vulnerability in the kernel scsi driver.Google Android
- CVE-2017-13169An information disclosure vulnerability in the kernel camera server.Google Android
- CVE-2017-13170An elevation of privilege vulnerability in the MediaTek display driver.Google Android
- CVE-2017-13171An elevation of privilege vulnerability in the MediaTek performance service.Google Android
- CVE-2017-13172An elevation of privilege vulnerability in the MediaTek bluetooth driver.Google Android
- CVE-2017-13173An elevation of privilege vulnerability in the MediaTek system server.Google Android
- CVE-2017-13174An elevation of privilege vulnerability in the kernel edl.Google Android
- CVE-2017-13175An information disclosure vulnerability in the NVIDIA libwilhelm.Google Android
- CVE-2017-17069ActiveSetupN.exe in Amazon Audible for Windows before November 2017 allows attackers to execute arbitrary DLL code if ActiveSetupN.exe is la
- CVE-2017-17383Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, org.jenkins-ci.main:jenkins-core
- CVE-2017-17433The recv_files function in receiver.c in the daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, proceeds with certain file meta
- CVE-2017-17434The daemon in rsync 3.1.2, and 3.1.3-development before 2017-12-03, does not check for fnamecmp filenames in the daemon_filter_list data str
- CVE-2017-14374The SMI-S service in Dell Storage Manager versions earlier than 16.3.20 (aka 2016 R3.20) is protected using a hard-coded password.Dell Storage Manager 2016 Dell Storage Manager versions ear…
- CVE-2017-17432OpenAFS 1.x before 1.6.22 does not properly validate Rx ack packets, which allows remote attackers to cause a denial of service (system cras