Skip to content
OpenAdvisories

Archive

4 May 2017

Vulnerabilities first published on this day (UTC), newest first.

← April 2017 2017 / May /4 June 2017 →
  1. 131
  2. 221
  3. 328
  4. 419
  5. 543
  6. 611
  7. 71
  8. 826
  9. 940
  10. 1031
  11. 1125
  12. 12174
  13. 13 
  14. 144
  15. 1529
  16. 1638
  17. 1721
  18. 1841
  19. 1930
  20. 20 
  21. 2124
  22. 22127
  23. 23117
  24. 2417
  25. 2526
  26. 2625
  27. 271
  28. 2810
  29. 2926
  30. 3016
  31. 318
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Unscored —
    CVE-2016-7054 Public exploit EPSS 32%

    ChaCha20/Poly1305 heap-buffer-overflow

    In OpenSSL 1.1.0 before 1.1.0c, TLS connections using *-CHACHA20-POLY1305 ciphersuites are susceptible to a DoS attack by corrupting larger payloads. This can result in an OpenSSL crash. This issue is not considered to be exploitable beyond a DoS.

    OpenSSL OpenSSL openssl Debian
  • Unscored —
    CVE-2017-3730 Public exploit EPSS 55%

    Bad (EC)DHE parameters cause a client crash

    In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service…

    OpenSSL OpenSSL openssl Debian
  • Unscored —
    CVE-2017-8295 Public exploit EPSS 27%

    WordPress through 4.7.4 relies on the Host HTTP header for a password-reset e-mail message, which makes it easier for r…

    wordpress wordpress Debian Ubuntu
  • Unscored —
    CVE-2017-8779 Public exploit EPSS 81%

    rpcbind through 0.2.4, LIBTIRPC through 1.0.1 and 1.0.2-rc through 1.0.2-rc3, and NTIRPC through 1.4.3 do not consider …

    rpcbind rpcbind libtirpc libtirpc Debian Ubuntu Alpine