Archive

February 2017

Vulnerabilities first published in this month (UTC), newest first.

← January 2017 2017 / February March 2017 →

1143
215
344
43
53
632
734
886
952
109
11
126
13124
144
1592
1628
1759
183
19
20154
2121
2241
2311
2434
25
261
2730
2812

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 4.9

CVE-2016-4314 Public exploit EPSS 12%

WSO2 Carbon directory traversal vulnerability

Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the logFile parameter to downloadgz-ajaxprocessor.jsp.

org.wso2.carbon.commons:org.wso2.carbon.logging.view.ui Maven

Feb 16, 2017
Medium 6.1

CVE-2016-4316 Public exploit

WSO2 Carbon vulnerable to Cross-site Scripting

Multiple cross-site scripting (XSS) vulnerabilities in WSO2 Carbon 4.4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) setName parameter to identity-mgt/challenges-mgt.jsp; the (2) webappType or (3) httpPort parameter to webapp-lis…

org.wso2.carbon.commons:org.wso2.carbon.ndatasource.ui org.wso2.carbon.commons:org.wso2.carbon.messageflows.ui org.wso2.carbon.identity.framework:org.wso2.carbon.identity.mgt.ui Maven

Feb 16, 2017
Medium 5.9

CVE-2016-6210 Public exploit EPSS 89%

sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static…

openssh openssh openssh Debian Ubuntu Alpine

Feb 13, 2017