2017-12-30

2017-12-31

2018-01-01

All (2) Critical (1) High (1) Medium (2)

CVE-2017-18005 Dec 31, 19:29 MEDIUM POC This Month

Exiv2 0.26 has a Null Pointer Dereference in the Exiv2::DataValue::toLong function in value.cpp, related to crafted metadata in a TIFF file. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Null Pointer Dereference Debian Debian Linux Exiv2

NVD GitHub

CVSS 3.1

5.5

EPSS

0.4%

CVE-2017-18004 Dec 31, 19:29 MEDIUM POC This Month

Zurmo 3.2.3 allows XSS via the latitude or longitude parameter to maps/default/mapAndPoint. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Zurmo Crm Zurmo

NVD

CVSS 3.0

5.4

EPSS

0.2%