Skip to content
OpenAdvisories

Archive

24 April 2017

Vulnerabilities first published on this day (UTC), newest first.

← March 2017 2017 / April /24 May 2017 →
  1. 19
  2. 2177
  3. 348
  4. 423
  5. 534
  6. 632
  7. 787
  8. 8 
  9. 926
  10. 1098
  11. 1136
  12. 12154
  13. 1377
  14. 1460
  15. 152
  16. 161
  17. 1732
  18. 1814
  19. 1923
  20. 20101
  21. 2147
  22. 226
  23. 2319
  24. 24281
  25. 2537
  26. 2611
  27. 2720
  28. 2876
  29. 299
  30. 3029
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2017-5029

    Nokogiri implementation of libxslt lacks integer overflow checks

    The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a …

    chromium-browser oxide-qt nokogiri libxslt Linux Windows Android Browsers Debian Ubuntu Alpine RubyGems
  • High 8.8
    CVE-2017-5030 Exploited EPSS 41%

    Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0…

    chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
    KEV Jun 8, 2022
  • High 7.4
    CVE-2017-3506 Exploited Public exploit Scanner template EPSS 96%

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Support…

    Oracle WebLogic Server
    KEV Jun 3, 2024
  • High 8.5
    CVE-2017-3523

    Improper Access Control in MySQL Connectors Java

    Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.40 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protoc…

    Oracle MySQL Connectors mysql-connector-java mysql:mysql-connector-java Ubuntu Maven
  • High 8.8
    CVE-2016-3691

    Kallithea Routes CSRF Bypass

    Routes in Kallithea before 0.3.2 allows remote attackers to bypass the CSRF protection by using the GET HTTP request method.

    kallithea PyPI
  • High 7.5
    CVE-2017-1000361

    OpenDaylight Controller DoS

    DOMRpcImplementationNotAvailableException when sending Port-Status packets to OpenDaylight. Controller launches exceptions and consumes more CPU resources. Component: OpenDaylight is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 a…

    org.opendaylight.controller:releasepom Maven