Skip to content
OpenAdvisories

Archive

26 April 2017

Vulnerabilities first published on this day (UTC), newest first.

← March 2017 2017 / April /26 May 2017 →
  1. 19
  2. 2177
  3. 348
  4. 423
  5. 534
  6. 632
  7. 787
  8. 8 
  9. 926
  10. 1098
  11. 1136
  12. 12154
  13. 1377
  14. 1460
  15. 152
  16. 161
  17. 1732
  18. 1814
  19. 1923
  20. 20101
  21. 2147
  22. 226
  23. 2319
  24. 24281
  25. 2537
  26. 2611
  27. 2720
  28. 2876
  29. 299
  30. 3029
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • High 7.3
    CVE-2017-3162

    Improper Input Validation in Apache Hadoop

    HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0.

    Apache Software Foundation Apache Hadoop org.apache.hadoop:hadoop-client Maven
  • Medium 6.1
    CVE-2017-3161

    Improper Neutralization of Input During Web Page Generation in Apache Hadoop

    The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter.

    Apache Software Foundation Apache Hadoop org.apache.hadoop:hadoop-client Maven
  • Unscored —
    CVE-2016-8924

    IBM Maximo Asset Management 7.1, 7.5 and 7.6 could allow a remote attacker to hijack a user's session, caused by the fa…

    IBM Maximo Asset Management
  • Unscored —
    CVE-2016-8962

    IBM BigFix Inventory 9.2 does not require that users should have strong passwords by default, which makes it easier for…

    IBM BigFix Inventory
  • Unscored —
    CVE-2017-1170

    IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 8.0 could allow a local user to hijack a user's…

    IBM WebSphere Commerce Enterprise
  • Unscored —
    CVE-2017-7720

    Buffer overflow in PrivateTunnel 2.7 and 2.8 allows local attackers to cause a denial of service (SEH overwrite) or pos…

  • Unscored —
    CVE-2017-6052

    A Man-in-the-Middle issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4. Communication channel endp…

  • Unscored —
    CVE-2017-6054

    A Use of Hard-Coded Cryptographic Key issue was discovered in Hyundai Motor America Blue Link 3.9.5 and 3.9.4. The appl…

  • Unscored —
    CVE-2017-8284

    The disas_insn function in target/i386/translate.c in QEMU before 2.9.0, when TCG mode without hardware acceleration is…

    qemu qemu Debian Ubuntu
  • Unscored —
    CVE-2017-7293 Public exploit

    The Dolby DAX2 and DAX3 API services are vulnerable to a privilege escalation vulnerability that allows a normal user t…

  • Unscored —
    CVE-2017-8283

    dpkg-source in dpkg 1.3.0 through 1.18.23 is able to use a non-GNU patch program and does not offer a protection mechan…

    dpkg Debian