# CVEs published 2017-12-08 30 CVEs were published on December 8, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-17479](https://cve.now/CVE-2017-17479.md): In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. (no CVSS) - [CVE-2017-17480](https://cve.now/CVE-2017-17480.md): In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. (no CVSS) - [CVE-2017-11480](https://cve.now/CVE-2017-11480.md): Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. (no CVSS, Elastic Packetbeat · github.com/elastic/beats) - [CVE-2017-11481](https://cve.now/CVE-2017-11481.md): Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtai (no CVSS, Elastic Kibana) - [CVE-2017-11482](https://cve.now/CVE-2017-11482.md): The Kibana fix for CVE-2017-8451 was found to be incomplete. (no CVSS, Elastic Kibana) - [CVE-2017-16854](https://cve.now/CVE-2017-16854.md): In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in a (no CVSS) - [CVE-2017-12823](https://cve.now/CVE-2017-12823.md): Kernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1.2.0.300 leads to local privilege escalation (no CVSS, Kaspersky Labs Kaspersky Embedded Systems Security) - [CVE-2017-15891](https://cve.now/CVE-2017-15891.md): Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1-0242 allows remote authenticated users to modi (no CVSS, Synology Calendar) - [CVE-2017-15893](https://cve.now/CVE-2017-15893.md): Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology File Station before 1.1.1-0099 allows remote authenticated use (no CVSS, Synology File Station) - [CVE-2017-15894](https://cve.now/CVE-2017-15894.md): Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager (DSM) 6.0.x before 6.0.3-8754-3 and before (no CVSS, Synology DiskStation Manager) - [CVE-2017-15895](https://cve.now/CVE-2017-15895.md): Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager (SRM) before 1.1.5-6542-4 allows remote authent (no CVSS, Synology Router Manager) - [CVE-2017-10893](https://cve.now/CVE-2017-10893.md): Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software" Ver3.1 and earlier allows (no CVSS, Japan Agency for Local Authority Information Systems The Pu…) - [CVE-2017-10896](https://cve.now/CVE-2017-10896.md): Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows a (no CVSS, BUFFALO BBR-4HG · BUFFALO BBR-4MG) - [CVE-2017-10897](https://cve.now/CVE-2017-10897.md): Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker t (no CVSS, BUFFALO BBR-4HG · BUFFALO BBR-4MG) - [CVE-2017-10906](https://cve.now/CVE-2017-10906.md): Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execu (no CVSS, Cloud Native Computing Foundation (CNCF) Fluentd · fluentd) - [CVE-2017-16921](https://cve.now/CVE-2017-16921.md): In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who i (no CVSS) - [CVE-2017-11940](https://cve.now/CVE-2017-11940.md): The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, (no CVSS, Microsoft Malware Protection Engine) - [CVE-2017-17466](https://cve.now/CVE-2017-17466.md): TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\\\.\\Viragtlt (no CVSS) - [CVE-2017-17467](https://cve.now/CVE-2017-17467.md): TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\ (no CVSS) - [CVE-2017-17468](https://cve.now/CVE-2017-17468.md): TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\\\.\\Viragtlt (no CVSS) - [CVE-2017-17469](https://cve.now/CVE-2017-17469.md): TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\ (no CVSS) - [CVE-2017-17470](https://cve.now/CVE-2017-17470.md): TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\ (no CVSS) - [CVE-2017-17471](https://cve.now/CVE-2017-17471.md): TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\ (no CVSS) - [CVE-2017-17472](https://cve.now/CVE-2017-17472.md): TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\ (no CVSS) - [CVE-2017-17473](https://cve.now/CVE-2017-17473.md): TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\ (no CVSS) - [CVE-2017-17474](https://cve.now/CVE-2017-17474.md): TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\ (no CVSS) - [CVE-2017-17475](https://cve.now/CVE-2017-17475.md): TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\ (no CVSS) - [CVE-2017-17463](https://cve.now/CVE-2017-17463.md): Vivo modems allow remote attackers to obtain sensitive information by reading the index.cgi?page=wifi HTML source code, as demonstrated by s (no CVSS) - [CVE-2017-17464](https://cve.now/CVE-2017-17464.md): K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002570 DeviceIoControl request. (no CVSS) - [CVE-2017-17465](https://cve.now/CVE-2017-17465.md): K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002574 DeviceIoControl request. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-12-08 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.