# CVEs published 2017-12-30 24 CVEs were published on December 30, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2016-10704](https://cve.now/CVE-2016-10704.md): Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have XSS via e-mail templates that are mishandled duri (no CVSS) - [CVE-2017-14855](https://cve.now/CVE-2017-14855.md): Red Lion HMI panels allow remote attackers to cause a denial of service (software exception) via an HTTP POST request to a long URI that doe (no CVSS) - [CVE-2017-17089](https://cve.now/CVE-2017-17089.md): custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the cus (no CVSS) - [CVE-2017-12810](https://cve.now/CVE-2017-12810.md): PHPJabbers PHP Newsletter Script 4.2 has stored XSS in lists in the admin panel. (no CVSS) - [CVE-2017-12811](https://cve.now/CVE-2017-12811.md): PHPJabbers Star Rating Script 4.0 has stored XSS via a rating item. (no CVSS) - [CVE-2017-12812](https://cve.now/CVE-2017-12812.md): PHPJabbers Night Club Booking Software has stored XSS in the name parameter in the reservations tab. (no CVSS) - [CVE-2017-12813](https://cve.now/CVE-2017-12813.md): PHPJabbers File Sharing Script 1.0 has stored XSS in the comments section. (no CVSS) - [CVE-2017-17997](https://cve.now/CVE-2017-17997.md): In Wireshark before 2.2.12, the MRDISC dissector misuses a NULL pointer and crashes. (no CVSS) - [CVE-2017-17981](https://cve.now/CVE-2017-17981.md): PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/slider\_edit.php edit\_id parameter. (no CVSS) - [CVE-2017-17982](https://cve.now/CVE-2017-17982.md): PHP Scripts Mall Muslim Matrimonial Script has CSRF via admin/subadmin\_edit.php. (no CVSS) - [CVE-2017-17983](https://cve.now/CVE-2017-17983.md): PHP Scripts Mall Muslim Matrimonial Script has SQL injection via the view-profile.php mem\_id parameter. (no CVSS) - [CVE-2017-17984](https://cve.now/CVE-2017-17984.md): PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event\_edit.php edit\_id parameter. (no CVSS) - [CVE-2017-17985](https://cve.now/CVE-2017-17985.md): PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/state\_view.php cou\_id parameter. (no CVSS) - [CVE-2017-17986](https://cve.now/CVE-2017-17986.md): PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/caste\_view.php comm\_id parameter. (no CVSS) - [CVE-2017-17987](https://cve.now/CVE-2017-17987.md): PHP Scripts Mall Muslim Matrimonial Script allows arbitrary file upload via admin/mydetails\_edit.php. (no CVSS) - [CVE-2017-17988](https://cve.now/CVE-2017-17988.md): PHP Scripts Mall Muslim Matrimonial Script has XSS via the admin/event\_add.php event\_title parameter. (no CVSS) - [CVE-2017-17989](https://cve.now/CVE-2017-17989.md): Biometric Shift Employee Management System has XSS via the index.php holiday\_name parameter in an edit\_holiday action. (no CVSS) - [CVE-2017-17990](https://cve.now/CVE-2017-17990.md): Biometric Shift Employee Management System has CSRF via index.php in an edit\_holiday action. (no CVSS) - [CVE-2017-17991](https://cve.now/CVE-2017-17991.md): Biometric Shift Employee Management System has XSS via the expense\_name parameter in an index.php?user=expenses request. (no CVSS) - [CVE-2017-17992](https://cve.now/CVE-2017-17992.md): Biometric Shift Employee Management System allows Arbitrary File Download via directory traversal sequences in the index.php form\_file\_name (no CVSS) - [CVE-2017-17993](https://cve.now/CVE-2017-17993.md): Biometric Shift Employee Management System has XSS via the amount parameter in an index.php?user=addition\_deduction request. (no CVSS) - [CVE-2017-17994](https://cve.now/CVE-2017-17994.md): Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competency\_criteria request. (no CVSS) - [CVE-2017-17995](https://cve.now/CVE-2017-17995.md): Biometric Shift Employee Management System has XSS via the Last\_Name parameter in an index.php?user=ajax request. (no CVSS) - [CVE-2017-17975](https://cve.now/CVE-2017-17975.md): Use-after-free in the usbtv\_probe function in drivers/media/usb/usbtv/usbtv-core.c in the Linux kernel through 4.14.10 allows attackers to c (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-12-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.