Skip to content
OpenAdvisories

Archive

6 June 2017

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.8
    CVE-2017-9462 Public exploit EPSS 22%

    Mercurial has Incorrect Permission Assignment for Critical Resource

    In Mercurial before 4.1.3, "hg serve --stdio" allows remote authenticated users to launch the Python debugger, and consequently execute arbitrary code, by using --debugger as a repository name.

  • High 7.5
    CVE-2017-5664 EPSS 17%

    Improper Handling of Exceptional Conditions in Apache Tomcat

    The error page mechanism of the Java Servlet Specification requires that, when an error occurs and an error page is configured for the error that occurred, the original request and response are forwarded to the error page. This means that the request is prese…