CVEs published December 30, 2017
24 CVEs were published on December 30, 2017: 0 critical, 0 high.
- Published
- 24
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 24
- CVE-2016-10704Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have XSS via e-mail templates that are mishandled duri
- CVE-2017-14855Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that doe
- CVE-2017-17089custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the cus
- CVE-2017-12810PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel.
- CVE-2017-12811PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item.
- CVE-2017-12812PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab.
- CVE-2017-12813PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section.
- CVE-2017-17997In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes.
- CVE-2017-17981PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider_edit.php edit_id parameter.
- CVE-2017-17982PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin_edit.php.
- CVE-2017-17983PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php mem_id parameter.
- CVE-2017-17984PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_edit.php edit_id parameter.
- CVE-2017-17985PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state_view.php cou_id parameter.
- CVE-2017-17986PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste_view.php comm_id parameter.
- CVE-2017-17987PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetails_edit.php.
- CVE-2017-17988PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event_add.php event_title parameter.
- CVE-2017-17989Biometric Shift Employee Management System has XSS via the index.php holiday_name parameter in an edit_holiday action.
- CVE-2017-17990Biometric Shift Employee Management System has CSRF via index.php in an edit_holiday action.
- CVE-2017-17991Biometric Shift Employee Management System has XSS via the expense_name parameter in an index.php?user=expenses request.
- CVE-2017-17992Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form_file_name
- CVE-2017-17993Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=addition_deduction request.
- CVE-2017-17994Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency_criteria request.
- CVE-2017-17995Biometric Shift Employee Management System has XSS via the Last_Name parameter in an index.php?user=ajax request.
- CVE-2017-17975Use-after-free in the usbtv_probe function in drivers/media/usb/usbtv/usbtv-core.c in the Linux kernel through 4.14.10 allows attackers to c