Skip to content
OpenAdvisories

Archive

24 April 2017

Vulnerabilities first published on this day (UTC), newest first.

← March 2017 2017 / April /24 May 2017 →
  1. 19
  2. 2177
  3. 348
  4. 423
  5. 534
  6. 632
  7. 787
  8. 8 
  9. 926
  10. 1098
  11. 1136
  12. 12154
  13. 1377
  14. 1460
  15. 152
  16. 161
  17. 1732
  18. 1814
  19. 1923
  20. 20101
  21. 2147
  22. 226
  23. 2319
  24. 24281
  25. 2537
  26. 2611
  27. 2720
  28. 2876
  29. 299
  30. 3029
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.9
    CVE-2016-5016

    Cloud Foundry vulnerable to Improper Certificate Validation

    Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic Runtime 1.6.x before 1.6.35, and PCF Elastic Runtime 1.7.x before 1.7.13 does not …

    org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Medium 6.4
    CVE-2017-3586

    Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java

    Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protoc…

    Oracle MySQL Connectors mysql-connector-java mysql:mysql-connector-java Ubuntu Maven
  • Medium 5.5
    CVE-2016-3076

    Pillow Buffer overflow in Jpeg2KEncode.c

    Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.

    pillow pillow Debian PyPI
  • Medium 5.3
    CVE-2017-1000360

    OpenDaylight NULL Pointer Dereference

    StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Controller launches exceptions in the console. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0.

    org.opendaylight.controller:releasepom Maven