Archive

28 March 2017

Vulnerabilities first published on this day (UTC), newest first.

← February 2017 2017 / March /28 April 2017 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.8

CVE-2016-6807

Apache Ambari Improper Access Control

Custom commands may be executed on Ambari Agent (2.4.x, before 2.4.2) hosts without authorization, leading to unauthorized access to operations that may affect the underlying system. Such operations are invoked by the Ambari Agent process on Ambari Agent host…

Apache Software Foundation Apache Ambari org.apache.ambari:ambari Maven

Mar 28, 2017
Critical 9.8

CVE-2016-8749 EPSS 11%

Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks

Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks.

Apache Software Foundation Apache Camel org.apache.camel:camel-jackson Maven

Mar 28, 2017
Critical 9.1

CVE-2016-9121

Elliptic Curve Key Disclosure in go-jose

go-jose before 1.0.4 suffers from an invalid curve attack for the ECDH-ES algorithm. When deriving a shared key using ECDH-ES for an encrypted message, go-jose neglected to check that the received public key on a message is on the same curve as the static pri…

golang-gopkg-square-go-jose.v1 github.com/square/go-jose gopkg.in/square/go-jose.v1 Debian Go

Mar 28, 2017