# CVEs published 2017-12-22

35 CVEs were published on December 22, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-17843](https://cve.now/CVE-2017-17843.md): An issue was discovered in Enigmail before 1.9.9 that allows remote attackers to trigger use of an intended public key for encryption, becau (no CVSS)
- [CVE-2017-17844](https://cve.now/CVE-2017-17844.md): An issue was discovered in Enigmail before 1.9.9. (no CVSS)
- [CVE-2017-17845](https://cve.now/CVE-2017-17845.md): An issue was discovered in Enigmail before 1.9.9. (no CVSS)
- [CVE-2017-17846](https://cve.now/CVE-2017-17846.md): An issue was discovered in Enigmail before 1.9.9. (no CVSS)
- [CVE-2017-17847](https://cve.now/CVE-2017-17847.md): An issue was discovered in Enigmail before 1.9.9. (no CVSS)
- [CVE-2017-17848](https://cve.now/CVE-2017-17848.md): An issue was discovered in Enigmail before 1.9.9. (no CVSS)
- [CVE-2017-17832](https://cve.now/CVE-2017-17832.md): ServersCheck Monitoring Software before 14.2.3 is prone to a cross-site scripting vulnerability as user supplied-data is not validated/sanit (no CVSS)
- [CVE-2017-15307](https://cve.now/CVE-2017-15307.md): Huawei Honor 8 smartphone with software versions earlier than FRD-L04C567B389 and earlier than FRD-L14C567B389 have a permission control vul (no CVSS, Huawei Technologies Co. Honor)
- [CVE-2017-15308](https://cve.now/CVE-2017-15308.md): Huawei iReader app before 8.0.2.301 has an input validation vulnerability due to insufficient validation on the URL used for loading network (no CVSS, Huawei Technologies Co. iReader)
- [CVE-2017-15309](https://cve.now/CVE-2017-15309.md): Huawei iReader app before 8.0.2.301 has a path traversal vulnerability due to insufficient validation on file storage paths. (no CVSS, Huawei Technologies Co. iReader)
- [CVE-2017-15310](https://cve.now/CVE-2017-15310.md): Huawei iReader app before 8.0.2.301 has an arbitrary file deletion vulnerability due to the lack of input validation. (no CVSS, Huawei Technologies Co. iReader)
- [CVE-2017-15311](https://cve.now/CVE-2017-15311.md): The baseband modules of Mate 10, Mate 10 Pro, Mate 9, Mate 9 Pro Huawei smart phones with software before ALP-AL00 8.0.0.120(SP2C00), before (no CVSS, Huawei Technologies Co. Mate)
- [CVE-2017-15312](https://cve.now/CVE-2017-15312.md): Huawei SmartCare V200R003C10 has a stored XSS (cross-site scripting) vulnerability in the dashboard module. (no CVSS, Huawei Technologies Co. SmartCare)
- [CVE-2017-15313](https://cve.now/CVE-2017-15313.md): Huawei SmartCare V200R003C10 has a CSV injection vulnerability. (no CVSS, Huawei Technologies Co. SmartCare)
- [CVE-2017-15316](https://cve.now/CVE-2017-15316.md): The GPU driver of Mate 9 Huawei smart phones with software before MHA-AL00B 8.0.0.334(C00) and Mate 9 Pro Huawei smart phones with software (no CVSS, Huawei Technologies Co. Mate)
- [CVE-2017-15317](https://cve.now/CVE-2017-15317.md): AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30; AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008 (no CVSS, Huawei Technologies Co. AR120-S · Huawei Technologies C… +13)
- [CVE-2017-15318](https://cve.now/CVE-2017-15318.md): RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE (no CVSS, Huawei Technologies Co. RP200 · Huawei Technologies Co.… +3)
- [CVE-2017-15319](https://cve.now/CVE-2017-15319.md): RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE (no CVSS, Huawei Technologies Co. RP200 · Huawei Technologies Co.… +3)
- [CVE-2017-15320](https://cve.now/CVE-2017-15320.md): RP200 V500R002C00, V600R006C00; TE30 V100R001C10, V500R002C00, V600R006C00; TE40 V500R002C00, V600R006C00; TE50 V500R002C00, V600R006C00; TE (no CVSS, Huawei Technologies Co. RP200 · Huawei Technologies Co.… +3)
- [CVE-2017-15321](https://cve.now/CVE-2017-15321.md): Huawei FusionSphere OpenStack V100R006C000SPC102 (NFV) has an information leak vulnerability due to the use of a low version transmission pr (no CVSS, Huawei Technologies Co. FusionSphere OpenStack)
- [CVE-2017-15322](https://cve.now/CVE-2017-15322.md): Some Huawei smartphones with software of BGO-L03C158B003CUSTC158D001 and BGO-L03C331B009CUSTC331D001 have a DoS vulnerability due to insuffi (no CVSS, Huawei Technologies Co. Baggio-L03A)
- [CVE-2017-15324](https://cve.now/CVE-2017-15324.md): Huawei S5700 and S6700 with software of V200R005C00 have a DoS vulnerability due to insufficient validation of the Network Quality Analysis (no CVSS, Huawei Technologies Co. S12700 · Huawei Technologies Co.… +5)
- [CVE-2017-15328](https://cve.now/CVE-2017-15328.md): Huawei HG8245H version earlier than V300R018C00SPC110 has an authentication bypass vulnerability. (no CVSS, Huawei Technologies Co. HG8245H)
- [CVE-2017-10868](https://cve.now/CVE-2017-10868.md): H2O version 2.2.2 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/1 header. (no CVSS, Kazuho Oku H2O)
- [CVE-2017-10869](https://cve.now/CVE-2017-10869.md): Buffer overflow in H2O version 2.2.2 and earlier allows remote attackers to cause a denial-of-service in the server via unspecified vectors. (no CVSS, Kazuho Oku H2O)
- [CVE-2017-10872](https://cve.now/CVE-2017-10872.md): H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via unspecified vectors. (no CVSS, Kazuho Oku H2O)
- [CVE-2017-10907](https://cve.now/CVE-2017-10907.md): Directory traversal vulnerability in OneThird CMS Show Off v1.85 and earlier. (no CVSS, SpiQe Software OneThird CMS)
- [CVE-2017-10908](https://cve.now/CVE-2017-10908.md): H2O version 2.2.3 and earlier allows remote attackers to cause a denial of service in the server via specially crafted HTTP/2 header. (no CVSS, Kazuho Oku H2O)
- [CVE-2017-10909](https://cve.now/CVE-2017-10909.md): Untrusted search path vulnerability in Music Center for PC version 1.0.01 and earlier allows an attacker to gain privileges via a Trojan hor (no CVSS, Sony Video & Sound Products Music Center for PC)
- [CVE-2017-16766](https://cve.now/CVE-2017-16766.md): An improper access control vulnerability in synodsmnotify in Synology DiskStation Manager (DSM) before 6.1.4-15217 and before 6.0.3-8754-6 a (no CVSS, Synology DiskStation Manager)
- [CVE-2017-17010](https://cve.now/CVE-2017-17010.md): Untrusted search path vulnerability in Content Manager Assistant for PlayStation version 3.55.7671.0901 and earlier allows an attacker to ga (no CVSS, Sony Interactive Entertainment Content Manager Assistant fo…)
- [CVE-2017-16995](https://cve.now/CVE-2017-16995.md): The check\_alu\_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory c (no CVSS)
- [CVE-2017-16996](https://cve.now/CVE-2017-16996.md): kernel/bpf/verifier.c in the Linux kernel through 4.14.8 allows local users to cause a denial of service (memory corruption) or possibly hav (no CVSS, Linux kernel through)
- [CVE-2017-17840](https://cve.now/CVE-2017-17840.md): An issue was discovered in Open-iSCSI through 2.0.875. (no CVSS)
- [CVE-2017-16727](https://cve.now/CVE-2017-16727.md): A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions prior to 1.11. (no CVSS, Moxa NPort W2150A and W2250A)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-12-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.