Skip to content
OpenAdvisories

Archive

April 2017

Vulnerabilities first published in this month (UTC), newest first.

← March 2017 2017 / April May 2017 →
  1. 19
  2. 2177
  3. 348
  4. 423
  5. 534
  6. 632
  7. 787
  8. 8 
  9. 926
  10. 1098
  11. 1136
  12. 12154
  13. 1377
  14. 1460
  15. 152
  16. 161
  17. 1732
  18. 1814
  19. 1923
  20. 20101
  21. 2147
  22. 226
  23. 2319
  24. 24281
  25. 2537
  26. 2611
  27. 2720
  28. 2876
  29. 299
  30. 3029
All Critical High Medium Low Exploited only Public exploit

38 results · Clear filters · Feed

  • Medium 5.4
    CVE-2017-8298

    Canvs Canvas Cross-site Scripting (XSS) via title and content fields

    cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a "Posts > Add New" action, and during creation of new tags and users.

    austintoddj/canvas Packagist
  • Medium 6.1
    CVE-2017-3161

    Improper Neutralization of Input During Web Page Generation in Apache Hadoop

    The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter.

    Apache Software Foundation Apache Hadoop org.apache.hadoop:hadoop-client Maven
  • Medium 5.9
    CVE-2016-5016

    Cloud Foundry vulnerable to Improper Certificate Validation

    Pivotal Cloud Foundry 239 and earlier, UAA (aka User Account and Authentication Server) 3.4.1 and earlier, UAA release 12.2 and earlier, PCF (aka Pivotal Cloud Foundry) Elastic Runtime 1.6.x before 1.6.35, and PCF Elastic Runtime 1.7.x before 1.7.13 does not …

    org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Medium 6.4
    CVE-2017-3586

    Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java

    Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protoc…

    Oracle MySQL Connectors mysql-connector-java mysql:mysql-connector-java Ubuntu Maven
  • Medium 5.5
    CVE-2016-3076

    Pillow Buffer overflow in Jpeg2KEncode.c

    Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.

    pillow pillow Debian PyPI
  • Medium 5.3
    CVE-2017-1000360

    OpenDaylight NULL Pointer Dereference

    StreamCorruptedException and NullPointerException in OpenDaylight odl-mdsal-xsql. Controller launches exceptions in the console. Component: OpenDaylight odl-mdsal-xsql is vulnerable to this flaw. Version: The tested versions are OpenDaylight 3.3 and 4.0.

    org.opendaylight.controller:releasepom Maven
  • Medium 6.1
    CVE-2017-8052

    Craft CMS XSS Vulnerability

    Craft CMS before 2.6.2974 allows XSS attacks.

    craftcms/cms Packagist
  • Medium 5.4
    CVE-2016-6519

    Openstack Manila Persistent XSS in Metadata field

    Cross-site scripting (XSS) vulnerability in the "Shares" overview in Openstack Manila before 2.5.1 allows remote authenticated users to inject arbitrary web script or HTML via the Metadata field in the "Create Share" form.

    manila-ui manila-ui manila-ui Debian Ubuntu PyPI
  • Medium 6.5
    CVE-2016-3729

    Moodle Improper Access Control

    The user editing form in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to edit profile fields locked by the administrator.

    moodle/moodle Packagist
  • Medium 4.3
    CVE-2016-3732

    Moodle sensitive information disclosure

    The capability check to access other badges in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to read the badges of other users.

    moodle/moodle moodle Ubuntu Packagist
  • Medium 4.3
    CVE-2016-3733

    Moodle Improper Access Control

    The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber.

    moodle/moodle Packagist
  • Medium 4.3
    CVE-2017-2806

    An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion function…

    Lexmark Perceptive Document Filters
  • Medium 6.1
    CVE-2016-6347

    Improper Neutralization of Input During Web Page Generation in RESTEasy

    Cross-site scripting (XSS) vulnerability in the default exception handler in RESTEasy allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

    resteasy resteasy3.0 org.jboss.resteasy:resteasy-client Debian Ubuntu Maven
  • Medium 6.6
    CVE-2017-7938 Public exploit

    Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to ca…

    dmitry dmitry Debian Ubuntu
  • Medium 6.1
    CVE-2017-7897

    MantisBT XSS via my_view_page.php and view_user_page.php

    A cross-site scripting (XSS) vulnerability in the MantisBT (2.3.x before 2.3.2) Timeline include page, used in My View (my_view_page.php) and User Information (view_user_page.php) pages, allows remote attackers to inject arbitrary code (if CSP settings permit…

    mantisbt/mantisbt Packagist
  • Medium 5.3
    CVE-2017-5653 EPSS 11%

    Improper Certificate Validation in Apache CXF

    JAX-RS XML Security streaming clients in Apache CXF before 3.1.11 and 3.0.13 do not validate that the service response was signed or encrypted, which allows remote attackers to spoof servers.

    Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  • Medium 5.3
    CVE-2016-8724

    An exploitable information disclosure vulnerability exists in the serviceAgent functionality of Moxa AWK-3131A Wireless…

    Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client ICS / OT
  • Medium 5.3
    CVE-2016-8722

    An exploitable Information Disclosure vulnerability exists in the Web Application functionality of Moxa AWK-3131A Serie…

    Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client ICS / OT
  • Medium 5.3
    CVE-2016-8725

    An exploitable information disclosure vulnerability exists in the Web Application functionality of the Moxa AWK-3131A w…

    Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client ICS / OT
  • Medium 5.9
    CVE-2016-8712

    An exploitable nonce reuse vulnerability exists in the Web Application functionality of Moxa AWK-3131A Wireless AP runn…

    Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client ICS / OT
  • Medium 6.1
    CVE-2017-7725 Public exploit

    Concrete CMS vulnerable to cross-site scripting (XSS)

    concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "canonical" URL on installation of concrete5 using the "Advanced Options" settings. Remote attackers can make a GET request with any domain na…

    concrete5/concrete5 Packagist
  • Medium 6.1
    CVE-2015-7565

    ember-source Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1.13.x before 1.13.12, 2.0.x before 2.0.3, 2.1.x before 2.1.2, and 2.2.x before 2.2.1 allows remote attackers to inject arbitrary web script…

    ember-source RubyGems
  • Medium 5.3
    CVE-2015-1839

    SaltStack has insecure /tmp file handling in salt/modules/chef.py

    modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.

    salt PyPI
  • Medium 5.3
    CVE-2015-1838

    Salt improper handling of tmp files

    modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.

    salt PyPI
  • Medium 6.1
    CVE-2015-7562 Public exploit

    TeamPass vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) label value of an item or (2) name of a role.

    nilsteampassnet/teampass Packagist
  • Medium 6.1
    CVE-2016-6348

    JacksonJsonpInterceptor susceptible to cross-site script inclusion (XSSI) attack

    JacksonJsonpInterceptor in RESTEasy might allow remote attackers to conduct a cross-site script inclusion (XSSI) attack.

    resteasy resteasy3.0 org.jboss.resteasy:resteasy-client Debian Ubuntu Maven
  • Medium 4.3
    CVE-2017-0208 EPSS 15%

    ChakraCore information disclosure vulnerability

    An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's sy…

    Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Medium 5.5
    CVE-2016-1517

    Improper Input Validation in OpenCV

    OpenCV 3.0.0 allows remote attackers to cause a denial of service (segfault) via vectors involving corrupt chunks.

    opencv opencv-python opencv-contrib-python opencv Debian Ubuntu PyPI
  • Medium 5.9
    CVE-2016-6805

    Moderate severity vulnerability that affects org.apache.ignite:ignite-core

    Apache Ignite before 1.9 allows man-in-the-middle attackers to read arbitrary files via XXE in modified update-notifier documents.

    org.apache.ignite:ignite-core Maven
  • Medium 5.3
    CVE-2017-0360

    Tryton Information Disclosure Vulnerability

    file_open in Tryton 3.x and 4.x through 4.2.2 allows remote authenticated users with certain permissions to read arbitrary files via a "same root name but with a suffix" attack. NOTE: This vulnerability exists because of an incomplete fix for CVE-2016-1242.

    trytond tryton-server tryton-server Debian Ubuntu PyPI
  • Medium 6.1
    CVE-2017-7234

    Django open redirect

    A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could redirect to any other domain, aka an open redirect vulnerability.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Medium 6.1
    CVE-2017-7233

    Django open redirect and possible XSS attack via user-supplied numeric redirect URLs

    Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL. The security check for these redirects (namely ``django.utils.http.is_safe_url()``) considered some numeric URL…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI
  • Medium 4.6
    CVE-2017-7305

    Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier for physically proximate atta…

  • Medium 6.4
    CVE-2017-7306

    Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically prox…

  • Medium 4.8
    CVE-2017-7400

    OpenStack Horizon Cross-site Scripting (XSS)

    OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping.

    horizon horizon Debian PyPI
  • Medium 4.3
    CVE-2016-10221

    The count_entries function in pdf-layer.c in Artifex Software, Inc. MuPDF 1.10a allows remote attackers to cause a deni…

  • Medium 6.1
    CVE-2017-7391 Scanner template

    Magmi XSS Vulnerability

    A Cross-Site Scripting (XSS) was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration of user-supplied data (prefix) passed to the 'magmi-git-master/magmi/web/ajax_gettime.php' URL. An attacker could execute arbitrary HTML and…

    dweeves/magmi Packagist
  • Medium 6.1
    CVE-2017-7390

    SocialNetwork Cross-Site Scripting (XSS) vulnerability

    A Cross-Site Scripting (XSS) was discovered in 'SocialNetwork v1.2.1'. The vulnerability exists due to insufficient filtration of user-supplied data (mail) passed to the 'SocialNetwork-andrea/app/template/pw_forgot.php' URL. An attacker could execute arbitrar…

    movingbytes/social-network Packagist