2017 CVEs (page 48)
Page 48 of 148 — CVEs published in 2017, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-16397 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16396 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16395 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16394 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16393 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16392 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16391 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16390 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16389 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16388 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16387 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16386 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16385 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16384 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16383 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16382 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16381 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16380 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16379 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16378 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16377 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16376 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16375 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16374 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16373 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16372 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16371 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16370 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16369 | Medium | 6.5 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16368 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16367 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16366 | High | 7.5 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16365 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16364 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16363 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16362 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16361 | Medium | 6.5 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-16360 | High | 8.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-11304 | Critical | 9.8 | 2017-12-09 | An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable use-after-free vulnerability exists. Successful exploitation… |
CVE-2017-11303 | Critical | 9.8 | 2017-12-09 | An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitati… |
CVE-2017-11302 | Critical | 9.8 | 2017-12-09 | An issue was discovered in Adobe InDesign 12.1.0 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation could lea… |
CVE-2017-11301 | Medium | 5.3 | 2017-12-09 | An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclo… |
CVE-2017-11300 | Medium | 5.3 | 2017-12-09 | An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclo… |
CVE-2017-11299 | Medium | 5.3 | 2017-12-09 | An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclo… |
CVE-2017-11298 | Medium | 5.3 | 2017-12-09 | An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclo… |
CVE-2017-11297 | Medium | 5.3 | 2017-12-09 | An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. An exploitable memory corruption vulnerability exists, which could lead to disclo… |
CVE-2017-11296 | Medium | 6.1 | 2017-12-09 | An issue was discovered in Adobe Experience Manager 6.3, 6.2, 6.1, 6.0. A cross-site scripting vulnerability in Apache Sling Servlets Post 2.3.20 has been reso… |
CVE-2017-11295 | Critical | 9.8 | 2017-12-09 | An issue was discovered in Adobe DNG Converter 9.12.1 and earlier versions. An exploitable memory corruption vulnerability exists. Successful exploitation coul… |
CVE-2017-11294 | Critical | 9.8 | 2017-12-09 | An issue was discovered in Adobe Shockwave 12.2.9.199 and earlier. An exploitable memory corruption vulnerability exists. Successful exploitation could lead to… |
CVE-2017-11293 | Critical | 9.8 | 2017-12-09 | An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.30355 and earlier versi… |
CVE-2017-11291 | Critical | 10.0 | 2017-12-09 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass n… |
CVE-2017-11290 | Medium | 6.1 | 2017-12-09 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress (or Clickjacking) vulnerability exists. This issue has been resolved by addin… |
CVE-2017-11289 | Medium | 6.1 | 2017-12-09 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information discl… |
CVE-2017-11288 | Medium | 6.1 | 2017-12-09 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information discl… |
CVE-2017-11287 | Medium | 6.1 | 2017-12-09 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A reflected cross-site scripting vulnerability exists that can result in information discl… |
CVE-2017-11273 | Medium | 5.5 | 2017-12-09 | An issue was discovered in Adobe Digital Editions 4.5.6 and earlier versions. Adobe Digital Editions parses crafted XML files in an unsafe manner, which could… |
CVE-2017-11225 | Critical | 9.8 | 2017-12-09 | An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Prime… |
CVE-2017-11215 | Critical | 9.8 | 2017-12-09 | An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability is an instance of a use after free vulnerability in the Prime… |
CVE-2017-11213 | Critical | 9.8 | 2017-12-09 | An issue was discovered in Adobe Flash Player 27.0.0.183 and earlier versions. This vulnerability occurs as a result of a computation that reads data that is p… |
CVE-2017-17480 | Critical | 9.8 | 2017-12-08 | In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtovolume function in jp3d/convert.c. The vulnerability causes an out-of-bounds write… |
CVE-2017-17479 | Critical | 9.8 | 2017-12-08 | In OpenJPEG 2.3.0, a stack-based buffer overflow was discovered in the pgxtoimage function in jpwl/convert.c. The vulnerability causes an out-of-bounds write… |
CVE-2017-11482 | Medium | 6.1 | 2017-12-08 | The Kibana fix for CVE-2017-8451 was found to be incomplete. With X-Pack installed, Kibana versions before 6.0.1 and 5.6.5 have an open redirect vulnerability… |
CVE-2017-11481 | Medium | 6.1 | 2017-12-08 | Kibana versions prior to 6.0.1 and 5.6.5 had a cross-site scripting (XSS) vulnerability via URL fields that could allow an attacker to obtain sensitive informa… |
CVE-2017-11480 | High | 7.5 | 2017-12-08 | Packetbeat versions prior to 5.6.4 are affected by a denial of service flaw in the PostgreSQL protocol handler. If Packetbeat is listening for PostgreSQL traff… |
CVE-2017-16854 | Medium | 6.5 | 2017-12-08 | In Open Ticket Request System (OTRS) through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can us… |
CVE-2017-15895 | Medium | 6.5 | 2017-12-08 | Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager (SRM) before 1.1.5-6542-4 allows remote authenticated users to wri… |
CVE-2017-15894 | Medium | 6.5 | 2017-12-08 | Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology DiskStation Manager (DSM) 6.0.x before 6.0.3-8754-3 and before 5.2-5967-6 allows… |
CVE-2017-15893 | Medium | 6.5 | 2017-12-08 | Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology File Station before 1.1.1-0099 allows remote authenticated users to write arbitra… |
CVE-2017-15891 | Medium | 6.5 | 2017-12-08 | Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1-0242 allows remote authenticated users to modify calendar event v… |
CVE-2017-12823 | High | 7.8 | 2017-12-08 | Kernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1.2.0.300 leads to local privilege escalation. |
CVE-2017-16921 | High | 8.8 | 2017-12-08 | In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who is logged into OTRS… |
CVE-2017-10906 | Critical | 9.8 | 2017-12-08 | Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary comman… |
CVE-2017-10897 | Medium | 4.5 | 2017-12-08 | Input validation issue in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to cause the device… |
CVE-2017-10896 | Medium | 6.1 | 2017-12-08 | Cross-site scripting vulnerability in Buffalo BBR-4HG and and BBR-4MG broadband routers with firmware 1.00 to 1.48 and 2.00 to 2.07 allows an attacker to injec… |
CVE-2017-10893 | High | 7.8 | 2017-12-08 | Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software" Ver3.1 and earlier allows an attacker to gai… |
CVE-2017-11940 | High | 7.8 | 2017-12-08 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1… |
CVE-2017-17475 | High | 7.8 | 2017-12-08 | TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceI… |
CVE-2017-17474 | High | 7.8 | 2017-12-08 | TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceI… |
CVE-2017-17473 | High | 7.8 | 2017-12-08 | TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceI… |
CVE-2017-17472 | High | 7.8 | 2017-12-08 | TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceI… |
CVE-2017-17471 | High | 7.8 | 2017-12-08 | TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceI… |
CVE-2017-17470 | High | 7.8 | 2017-12-08 | TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceI… |
CVE-2017-17469 | High | 7.8 | 2017-12-08 | TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceI… |
CVE-2017-17468 | High | 7.8 | 2017-12-08 | TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\.\Viragtlt DeviceIoControl req… |
CVE-2017-17467 | High | 7.8 | 2017-12-08 | TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact via a \\.\Viragtlt DeviceI… |
CVE-2017-17466 | High | 7.8 | 2017-12-08 | TG Soft Vir.IT eXplorer Lite 8.5.42 allows local users to gain privileges or cause a denial of service (Arbitrary Write) via a \\.\Viragtlt DeviceIoControl req… |
CVE-2017-17465 | Critical | 9.8 | 2017-12-08 | K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002574 DeviceIoControl request. |
CVE-2017-17464 | Critical | 9.8 | 2017-12-08 | K7Sentry.sys 15.1.0.59 in K7 Antivirus 15.1.0309 has a NULL pointer dereference via a 0x95002570 DeviceIoControl request. |
CVE-2017-17463 | High | 7.5 | 2017-12-08 | Vivo modems allow remote attackers to obtain sensitive information by reading the index.cgi?page=wifi HTML source code, as demonstrated by ssid and psk_wepkey… |
CVE-2017-14386 | Medium | 6.1 | 2017-12-07 | The web user interface of Dell 2335dn and 2355dn Multifunction Laser Printers, firmware versions prior to V2.70.06.26 A13 and V2.70.45.34 A10 respectively, are… |
CVE-2017-1000410 | High | 7.5 | 2017-12-07 | The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse… |
CVE-2017-17459 | High | 8.8 | 2017-12-07 | http_transport.c in Fossil before 2.4, when the SSH sync protocol is used, allows user-assisted remote attackers to execute arbitrary commands via an ssh URL w… |
CVE-2017-17458 | Critical | 9.8 | 2017-12-07 | In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks… |
CVE-2017-11937 | High | 7.8 | 2017-12-07 | The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1… |
CVE-2017-3738 | Medium | 5.9 | 2017-12-07 | There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli. No EC algorithms are affected. Analysis s… |
CVE-2017-3737 | Medium | 5.9 | 2017-12-07 | OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism. The intent was that if a fatal error occurred during a handshake then OpenS… |
CVE-2017-1498 | Medium | 5.4 | 2017-12-07 | IBM Connections 5.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the i… |
CVE-2017-1497 | Low | 3.7 | 2017-12-07 | IBM Sterling File Gateway 2.2 could allow an unauthorized user to view files they should not have access to providing they know the directory location of the f… |
CVE-2017-1487 | Medium | 6.5 | 2017-12-07 | IBM Sterling File Gateway 2.2 could allow an authenticated attacker to obtain sensitive information such as login ids on the system. IBM X-Force ID: 128626. |
CVE-2017-1482 | Medium | 5.4 | 2017-12-07 | IBM Sterling B2B Integrator Standard Edition 5.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in t… |