Эксплуатируемые и новые серьёзные CVE: декабрь 2017 г.

Adobe Flash Player has an exploitable memory corruption vulnerability in the text handling function.

• RCE без входа
• Ошибки памяти

adobe · flash player1 дек. 2017 г.

Adobe Flash Player has an exploitable memory corruption vulnerability in the MP4 atom parser.

• RCE без входа
• Ошибки памяти

adobe · flash player1 дек. 2017 г.

Adobe ColdFusion has an Untrusted Data Deserialization vulnerability.

• Без аутентификации
• Десериализация

adobe · coldfusion1 дек. 2017 г.

Adobe ColdFusion has an Untrusted Data Deserialization vulnerability.

• Без аутентификации
• Десериализация

adobe · coldfusion1 дек. 2017 г.

In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash.

• Без аутентификации
• Отказ в обслуживании

wireshark · wireshark1 дек. 2017 г.

connoppp.cgi on ZTE ZXDSL 831CII devices does not require HTTP Basic Authentication, which allows remote attackers to modify the PPPoE confi

• Без аутентификации
• Обход аутентификации

zte · zxdsl 831cii firmware1 дек. 2017 г.

An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified As

• Без аутентификации
• Отказ в обслуживании

digium · certified asterisk1 дек. 2017 г.

tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow

• Без аутентификации
• Ошибки памяти

libtiff · libtiff2 дек. 2017 г.

There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16.

• Ошибки памяти

flexense · syncbreeze3 дек. 2017 г.

Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to ex

• RCE
• Инъекция команд

synology · diskstation manager4 дек. 2017 г.

The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability expl

• Обход пути

claymore dual miner project · claymore dual miner5 дек. 2017 г.

The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due

• RCE без входа
• Ошибки памяти

claymore dual miner project · claymore dual miner5 дек. 2017 г.

An elevation of privilege vulnerability in the Android system (art).

• Загрузка файлов
• Локальное повышение привилегий

google · android6 дек. 2017 г.

OpenSSL 1.0.2 (starting from version 1.0.2b) introduced an "error state" mechanism.

• Без аутентификации
• Ошибки памяти

openssl · openssl7 дек. 2017 г.

There is an overflow bug in the AVX2 Montgomery multiplication procedure used in exponentiation with 1024-bit moduli.

• Без аутентификации
• Утечка информации

openssl · openssl7 дек. 2017 г.

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1,

• RCE
• Ошибки памяти

microsoft · malware protection engine7 дек. 2017 г.

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1,

• RCE
• Ошибки памяти

microsoft · malware protection engine8 дек. 2017 г.

In OTRS 6.0.x up to and including 6.0.1, OTRS 5.0.x up to and including 5.0.24, and OTRS 4.0.x up to and including 4.0.26, an attacker who i

• RCE
• Инъекция команд

otrs · otrs8 дек. 2017 г.

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

• RCE без входа
• Ошибки памяти

adobe · acrobat9 дек. 2017 г.

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

• RCE без входа
• Ошибки памяти

adobe · acrobat9 дек. 2017 г.

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

• Без аутентификации
• Ошибки памяти

adobe · acrobat9 дек. 2017 г.

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

• RCE без входа
• Ошибки памяти

adobe · acrobat9 дек. 2017 г.

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

• RCE без входа
• Ошибки памяти

adobe · acrobat9 дек. 2017 г.

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

• RCE без входа
• Ошибки памяти

adobe · acrobat9 дек. 2017 г.

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

• RCE без входа
• Ошибки памяти

adobe · acrobat9 дек. 2017 г.

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

• RCE без входа
• Ошибки памяти

adobe · acrobat9 дек. 2017 г.

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

• RCE без входа
• Ошибки памяти

adobe · acrobat9 дек. 2017 г.

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

• RCE без входа
• Ошибки памяти

adobe · acrobat9 дек. 2017 г.

An issue was discovered in Adobe Acrobat and Reader: 2017.012.20098 and earlier versions, 2017.011.30066 and earlier versions, 2015.006.3035

• RCE без входа
• Ошибки памяти

adobe · acrobat9 дек. 2017 г.

In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI).

• RCE без входа

apache · synapse11 дек. 2017 г.

Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, 7.1.x before 7.1.14, and 8.0.x before 8.0.6 allows remote attackers to execute

• RCE без входа

paloaltonetworks · pan-os11 дек. 2017 г.

An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices.

• RCE без входа
• Обход аутентификации

westerndigital · my cloud pr4100 firmware12 дек. 2017 г.

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.

• RCE без входа

embedthis · goahead12 дек. 2017 г.

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding.

• Без аутентификации

erlang · erlang\/otp12 дек. 2017 г.

Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2008 SP2 and R2 SP1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and

• RCE

microsoft · windows 1012 дек. 2017 г.

Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511,

• RCE без входа
• Ошибки памяти

microsoft · internet explorer12 дек. 2017 г.

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in

• RCE без входа
• Ошибки памяти

microsoft · edge12 дек. 2017 г.

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Wi

• Без аутентификации
• Ошибки памяти

microsoft · internet explorer12 дек. 2017 г.

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, an

• Без аутентификации
• Утечка информации

microsoft · internet explorer12 дек. 2017 г.

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Wi

• Без аутентификации
• Ошибки памяти

microsoft · internet explorer12 дек. 2017 г.

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the

• RCE без входа
• Ошибки памяти

microsoft · edge12 дек. 2017 г.

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the

• RCE без входа
• Ошибки памяти

microsoft · edge12 дек. 2017 г.

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights

• Без аутентификации
• Ошибки памяти

microsoft · edge12 дек. 2017 г.

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user r

• Без аутентификации
• Ошибки памяти

microsoft · edge12 дек. 2017 г.

Microsoft Office 2013 RT SP1, Microsoft Office 2013 SP1, and Microsoft Office 2016 allow an information disclosure vulnerability due to the

• Утечка информации

microsoft · office12 дек. 2017 г.

Microsoft Office 2016 Click-to-Run (C2R) allows a remote code execution vulnerability due to the way files are handled in memory, aka "Micro

• RCE
• Ошибки памяти

microsoft · office12 дек. 2017 г.

BouncyCastle JCE TLS Bleichenbacher/ROBOT

• Без аутентификации

bouncycastle · bc-java12 дек. 2017 г.

wolfSSL Bleichenbacher/ROBOT

• Без аутентификации

wolfssl · wolfssl12 дек. 2017 г.

Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before b

• Без аутентификации
• Слабая криптография

citrix · application delivery controller firmware13 дек. 2017 г.

Radware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an adaptive-chosen ciphertext attack ("Bleichenba

• Без аутентификации

radware · alteon firmware13 дек. 2017 г.

A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified As

• Без аутентификации
• Ошибки памяти
• Отказ в обслуживании

digium · asterisk13 дек. 2017 г.

In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certa

• Без аутентификации
• Десериализация

vbulletin · vbulletin13 дек. 2017 г.

In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1.10 (fixed in Passenger Open Source 5.1.11 and Passenger Enterprise 5.1.10), if

• Утечка информации

phusion · passenger14 дек. 2017 г.

Ruby before 2.4.3 allows Net::FTP command injection.

• RCE без входа
• Инъекция команд

ruby-lang · ruby15 дек. 2017 г.

A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550) devices could allo

• Без аутентификации
• Утечка информации

cisco · adaptive security appliance 5505 firmware15 дек. 2017 г.

D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 are vulnerable to authentication bypass of the remote login page.

• Без аутентификации
• Обход аутентификации

d-link · dir-130 firmware15 дек. 2017 г.

D-Link DIR-130 firmware version 1.23 and DIR-330 firmware version 1.12 do not sufficiently protect administrator credentials.

• Без аутентификации
• Обход аутентификации
• Утечка информации

d-link · dir-130 firmware15 дек. 2017 г.

Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overfl

• RCE без входа
• Ошибки памяти

commvault · edge15 дек. 2017 г.

DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.

• Без аутентификации
• SQL-инъекция

dedecms · dedecms18 дек. 2017 г.

Maccms 8.x allows remote command execution via the wd parameter in an index.php?m=vod-search request.

• RCE без входа

maccms · maccms18 дек. 2017 г.

The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowi

• Без аутентификации
• Обход пути

brightsign · 4k242 firmware18 дек. 2017 г.

An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress.

• Без аутентификации
• Загрузка файлов

accesspressthemes · anonymous post pro18 дек. 2017 г.

Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind rem

• RCE без входа
• Инъекция команд

zivif · pr115-204-p-rs firmware18 дек. 2017 г.

Credentials for Zivif PR115-204-P-RS V2.3.4.2103 Webcams can be obtained by an unauthenticated remote attacker using a standard web /cgi-bin

• Без аутентификации
• Утечка информации

zivif · pr115-204-p-rs firmware18 дек. 2017 г.

Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service (by deleting

• Без аутентификации

conarc · ichannel19 дек. 2017 г.

Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execut

• RCE без входа
• Ошибки памяти

zoom · zoom19 дек. 2017 г.

The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell

• RCE без входа
• Инъекция команд

zoom · zoom19 дек. 2017 г.

SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, a

• RCE без входа
• SQL-инъекция

solarwinds · backup profiler20 дек. 2017 г.

In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the capability of chang

• Нарушение контроля доступа (IDOR)

cambiumnetworks · epmp 1000 firmware20 дек. 2017 г.

In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console

• RCE
• Инъекция команд

cambiumnetworks · epmp 1000 firmware20 дек. 2017 г.

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available u

cambiumnetworks · cnpilot r190v firmware20 дек. 2017 г.

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available i

cambiumnetworks · cnpilot r190v firmware20 дек. 2017 г.

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console

• Обход пути

cambiumnetworks · cnpilot r190v firmware20 дек. 2017 г.

In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive inform

• Утечка информации

cambiumnetworks · cnpilot r190v firmware20 дек. 2017 г.

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0.

• RCE без входа
• Инъекция команд

linksys · wvbr0 firmware21 дек. 2017 г.

Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted Java

• Без аутентификации
• Утечка информации

samsung · internet browser21 дек. 2017 г.

An issue was discovered in certain Apple products.

• RCE
• Локальное повышение привилегий
• Ошибки памяти

apple · iphone os25 дек. 2017 г.

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory c

• Ошибки памяти

linux · linux kernel27 дек. 2017 г.

A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code o

• RCE без входа
• Ошибки памяти

getgosoft · getgo download manager27 дек. 2017 г.

An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older.

• Без аутентификации
• Отказ в обслуживании

digium · asterisk27 дек. 2017 г.

cgi-bin/write.cgi in Anti-Web through 3.8.7, as used on NetBiter / HMS, Ouman EH-net, Alliance System WS100 --> AWU 500, Sauter ERW100F001,

• RCE
• Инъекция команд

hoytech · antiweb27 дек. 2017 г.

cgi-bin/mft/wireless_mft.cgi in AirLive BU-2015 with firmware 1.03.18 16.06.2014, AirLive BU-3026 with firmware 1.43 21.08.2014, AirLive MD-

• RCE без входа
• Зашитые учётные данные
• Инъекция команд

airlive · bu-3026 firmware27 дек. 2017 г.

A buffer overflow vulnerability exists in MediaServer.exe in ALLPlayer ALLMediaServer 0.95 and earlier that could allow remote attackers to

• RCE без входа
• Ошибки памяти

allmediaserver · allmediaserver28 дек. 2017 г.

Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by

• RCE без входа
• Десериализация

apache · flex blazeds28 дек. 2017 г.

A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to ex

• RCE без входа
• Ошибки памяти

xi-soft · nettransport download manager29 дек. 2017 г.

The TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce Plugin) plugin for WordPress before 1.3.9.3 allows remote

• Без аутентификации
• Нарушение контроля доступа (IDOR)

thecartpress · thecartpress ecommerce shopping cart29 дек. 2017 г.

Trustwave Secure Web Gateway (SWG) through 11.8.0.27 allows remote attackers to append an arbitrary public key to the device's SSH Authorize

• Без аутентификации
• Обход аутентификации

trustwave · secure web gateway31 дек. 2017 г.