CVEs published December 8, 2017
30 CVEs were published on December 8, 2017: 0 critical, 0 high.
- Published
- 30
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 30
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- BUFFALO BBR-4HG · BUFFALO BBR-4MG
- 2
- Elastic Kibana
- 2
- Cloud Native Computing Foundation (CNCF) Fluentd · fluentd
- 1
- Elastic Packetbeat · github.com/elastic/beats
- 1
- Japan Agency for Local Authority Information Systems The Pu…
- 1
- Kaspersky Labs Kaspersky Embedded Systems Security
- 1
- Microsoft Malware Protection Engine
- 1
- Synology Calendar
- 1
- Synology DiskStation Manager
- 1
- Synology File Station
- 1
Medium, low and unrated 30
- CVE-2017-17479In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c.
- CVE-2017-17480In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c.
- CVE-2017-11480Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler.Elastic Packetbeat · github.com/elastic/beats
- CVE-2017-11481Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtaiElastic Kibana
- CVE-2017-11482The Kibana fix for CVE-2017-8451 was found to be incomplete.Elastic Kibana
- CVE-2017-16854In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in a
- CVE-2017-12823Kernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1.2.0.300 leads to local privilege escalationKaspersky Labs Kaspersky Embedded Systems Security
- CVE-2017-15891Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1-0242 allows remote authenticated users to modiSynology Calendar
- CVE-2017-15893Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology File Station before 1.1.1-0099 allows remote authenticated useSynology File Station
- CVE-2017-15894Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager (DSM) 6.0.x before 6.0.3-8754-3 and beforeSynology DiskStation Manager
- CVE-2017-15895Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager (SRM) before 1.1.5-6542-4 allows remote authentSynology Router Manager
- CVE-2017-10893Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software" Ver3.1 and earlier allowsJapan Agency for Local Authority Information Systems The Pu…
- CVE-2017-10896Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows aBUFFALO BBR-4HG · BUFFALO BBR-4MG
- CVE-2017-10897Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker tBUFFALO BBR-4HG · BUFFALO BBR-4MG
- CVE-2017-10906Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execuCloud Native Computing Foundation (CNCF) Fluentd · fluentd
- CVE-2017-16921In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who i
- CVE-2017-11940The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1,Microsoft Malware Protection Engine
- CVE-2017-17466TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\.\Viragtlt
- CVE-2017-17467TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \
- CVE-2017-17468TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\.\Viragtlt
- CVE-2017-17469TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \
- CVE-2017-17470TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \
- CVE-2017-17471TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \
- CVE-2017-17472TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \
- CVE-2017-17473TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \
- CVE-2017-17474TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \
- CVE-2017-17475TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \
- CVE-2017-17463Vivo modems allow remote attackers to obtain sensitive information by reading the index.cgi?page=wifi HTML source code, as demonstrated by s
- CVE-2017-17464K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002570 DeviceIoControl request.
- CVE-2017-17465K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002574 DeviceIoControl request.