CVEs published December 31, 2017
4 CVEs were published on December 31, 2017: 0 critical, 0 high.
- Published
- 4
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 4
- CVE-2017-18001Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorize
- CVE-2017-18004Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint.
- CVE-2017-18005Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file.
- CVE-2017-17704A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction with the IP-ACM Eth