# CVEs published 2017-12-31

4 CVEs were published on December 31, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-18001](https://cve.now/CVE-2017-18001.md): Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorize (no CVSS)
- [CVE-2017-18004](https://cve.now/CVE-2017-18004.md): Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint. (no CVSS)
- [CVE-2017-18005](https://cve.now/CVE-2017-18005.md): Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file. (no CVSS)
- [CVE-2017-17704](https://cve.now/CVE-2017-17704.md): A door-unlocking issue was discovered on Software House iStar Ultra devices through 6.5.2.20569 when used in conjunction with the IP-ACM Eth (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-12-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.