CVEs published December 21, 2017
51 CVEs were published on December 21, 2017: 0 critical, 0 high.
- Published
- 51
- Critical
- 0
- High
- 0
- Medium
- 1
- Low
- 0
- Unrated
- 50
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- 9
- Bitdefender Internet Security
- 3
- F5 Networks BIG-IP APM
- 3
- QNAP QTS Login function
- 2
- QNAP QTS Password function
- 2
- F5 Networks BIG-IP AFM
- 1
- F5 Networks BIG-IP LTM, AAM, AFM, Analytics, ASM, DNS, GTM,…
- 1
- github.com/git-lfs/git-lfs
- 1
- Linksys WVBR0
- 1
- Micro Focus Operations Manager i
- 1
Medium, low and unrated 51
- CVE-2017-14363MFSBGN03795 rev.1 - Micro Focus Operations Manager i - Remote Cross-Site Scripting (XSS)Micro Focus Operations Manager i
- CVE-2017-17692Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted Java
- CVE-2017-0301In F5 BIG-IP APM software versions 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.6.0, 11.6.1, 12.0.0, 12.1.0, 12.1.1 and 12.1.2 BIG-IP APM portF5 Networks BIG-IP APM
- CVE-2017-0304A SQL injection vulnerability exists in the BIG-IP AFM management UI on versions 12.0.0, 12.1.0, 12.1.1, 12.1.2 and 13.0.0 that may allow a F5 Networks BIG-IP AFM
- CVE-2017-6129In F5 BIG-IP APM software version 13.0.0 and 12.1.2, in some circumstances, APM tunneled VPN flows can cause a VPN/PPP connflow to be prematF5 Networks BIG-IP APM
- CVE-2017-6132In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and Websafe software version 13.0.0, 12.0.0 to 12.1.2, 11.6.F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2017-6133In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, undiscloF5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2017-6134In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, 12.1.0 - 12.1.2 and 11.F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2017-6135In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0, a slow memory leak as aF5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2017-6136In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.0.0 - 12.1.2, undF5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2017-6138In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, GTM, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, malF5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2017-6139In F5 BIG-IP APM software version 13.0.0 and 12.1.2, under rare conditions, the BIG-IP APM system appends log details when responding to cliF5 Networks BIG-IP APM
- CVE-2017-6140On the BIG-IP 2000s, 2200s, 4000s, 4200v, i5600, i5800, i7600, i7800, i10600,i10800, and VIPRION 4450 blades, running version 11.5.0, 11.5.1F5 Networks BIG-IP LTM, AAM, AFM, Analytics, ASM, DNS, GTM,…
- CVE-2017-6151In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 1F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2017-6164In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator and WebSafe software version 1F5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2017-6167In F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, PEM and WebSafe software version 13.0.0 and 12.1.0 - 12.1.2, race conF5 Networks BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS,…
- CVE-2015-4100Puppet Enterprise 3.7.x and 3.8.0 might allow remote authenticated users to manage certificates for arbitrary nodes by leveraging a client c
- CVE-2015-7224puppetlabs-mysql 3.1.0 through 3.6.0 allow remote attackers to bypass authentication by leveraging creation of a database account without a
- CVE-2017-17027A buffer overflow vulnerability in FTP service in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) builQNAP QTS FTP service
- CVE-2017-17028A buffer overflow vulnerability in external device function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 QNAP QTS External Device function
- CVE-2017-17029A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) bQNAP QTS Login function
- CVE-2017-17030A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) bQNAP QTS Login function
- CVE-2017-17031A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2QNAP QTS Password function
- CVE-2017-17032A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2QNAP QTS Password function
- CVE-2017-17033A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2QNAP QTS Notification function
- CVE-2017-17408This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018.Bitdefender Internet Security
- CVE-2017-17409This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018.Bitdefender Internet Security
- CVE-2017-17410This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender Internet Security 2018.Bitdefender Internet Security
- CVE-2017-17411This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0.Linksys WVBR0
- CVE-2017-17831GitHub Git LFS before 2.1.1 allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostngithub.com/git-lfs/git-lfs
- CVE-2017-17828Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter.
- CVE-2017-17829Bus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the admin/view_member.php memid parameter.
- CVE-2017-17830Bus Booking Script has CSRF via admin/new_master.php.
- CVE-2017-17822The List Users API of Piwigo 2.9.2 is vulnerable to SQL Injection via the /admin/user_list_backend.php sSortDir_0 parameter.
- CVE-2017-17823The Configuration component of Piwigo 2.9.2 is vulnerable to SQL Injection via the admin/configuration.php order_by array parameter.
- CVE-2017-17824The Batch Manager component of Piwigo 2.9.2 is vulnerable to SQL Injection via the admin/batch_manager_unit.php element_ids parameter in uni
- CVE-2017-17825The Batch Manager component of Piwigo 2.9.2 is vulnerable to Persistent Cross Site Scripting via tags-* array parameters in an admin.php?pag
- CVE-2017-17826The Configuration component of Piwigo 2.9.2 is vulnerable to Persistent Cross Site Scripting via the gallery_title parameter in an admin.php
- CVE-2017-17827Piwigo 2.9.2 is vulnerable to Cross-Site Request Forgery via /admin.php?page=configuration§ion=main or /admin.php?page=batch_manager&mod
- CVE-2017-17810In Netwide Assembler (NASM) 2.14rc0, there is a "SEGV on unknown address" that will cause a remote denial of service attack, because asm/pre
- CVE-2017-17811In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer overflow that will cause a remote denial of service attack, related to a s
- CVE-2017-17812In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read in the function detoken() in asm/preproc.c that will cause a rem
- CVE-2017-17813In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in the pp_list_one_macro function in asm/preproc.c that will cause a remote d
- CVE-2017-17814In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in do_directive in asm/preproc.c that will cause a remote denial of service a
- CVE-2017-17815In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in is_mmacro() in asm/preproc.c that will cause a remote denial of s
- CVE-2017-17816In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_getline in asm/preproc.c that will cause a remote denial of service att
- CVE-2017-17817In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_verror in asm/preproc.c that will cause a remote denial of service atta
- CVE-2017-17818In Netwide Assembler (NASM) 2.14rc0, there is a heap-based buffer over-read that will cause a remote denial of service attack, related to a
- CVE-2017-17819In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote
- CVE-2017-17820In Netwide Assembler (NASM) 2.14rc0, there is a use-after-free in pp_list_one_macro in asm/preproc.c that will lead to a remote denial of se
- CVE-2017-17821WTF/wtf/FastBitVector.h in WebKit, as distributed in Safari Technology Preview Release 46, allows remote attackers to cause a denial of serv