# CVEs published 2017-12-19

13 CVEs were published on December 19, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-17763](https://cve.now/CVE-2017-17763.md): SuperBeam through 4.1.3, when using the LAN or WiFi Direct Share feature, does not use HTTPS or any integrity-protection mechanism for file (no CVSS)
- [CVE-2017-17761](https://cve.now/CVE-2017-17761.md): An issue was discovered on Ichano AtHome IP Camera devices. (no CVSS)
- [CVE-2017-17719](https://cve.now/CVE-2017-17719.md): A cross-site scripting (XSS) vulnerability in the wp-concours plugin through 1.1 for WordPress allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2017-17744](https://cve.now/CVE-2017-17744.md): A cross-site scripting (XSS) vulnerability in the custom-map plugin through 1.1 for WordPress allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2017-17753](https://cve.now/CVE-2017-17753.md): Multiple cross-site scripting (XSS) vulnerabilities in the esb-csv-import-export plugin through 1.1 for WordPress allow remote attackers to (no CVSS)
- [CVE-2013-6465](https://cve.now/CVE-2013-6465.md): Multiple cross-site scripting (XSS) vulnerabilities in JBPM KIE Workbench 6.0.x allow remote authenticated users to inject arbitrary web scr (no CVSS)
- [CVE-2017-15048](https://cve.now/CVE-2017-15048.md): Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execut (no CVSS)
- [CVE-2017-15049](https://cve.now/CVE-2017-15049.md): The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell (no CVSS)
- [CVE-2017-16786](https://cve.now/CVE-2017-16786.md): The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote authenticated users with certain privi (no CVSS)
- [CVE-2017-17088](https://cve.now/CVE-2017-17088.md): The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. (no CVSS)
- [CVE-2017-17757](https://cve.now/CVE-2017-17757.md): TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface f (no CVSS)
- [CVE-2017-17758](https://cve.now/CVE-2017-17758.md): TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface f (no CVSS)
- [CVE-2017-17759](https://cve.now/CVE-2017-17759.md): Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service (by deleting (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-12-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.