Skip to content
OpenAdvisories

Archive

12 June 2017

Vulnerabilities first published on this day (UTC), newest first.

← May 2017 2017 / June /12 July 2017 →
  1. 113
  2. 234
  3. 39
  4. 43
  5. 529
  6. 649
  7. 759
  8. 868
  9. 968
  10. 10 
  11. 113
  12. 1227
  13. 13121
  14. 1437
  15. 15112
  16. 1674
  17. 172
  18. 182
  19. 1938
  20. 2031
  21. 2132
  22. 2219
  23. 2313
  24. 247
  25. 2510
  26. 2629
  27. 2753
  28. 2818
  29. 2938
  30. 3035
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2015-9097

    Mail Gem CRLF Injection vulnerability

    The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM command, as demonstrated by CRLF sequences immediately before and after a DATA substring.

    mail ruby-mail Debian RubyGems
  • Medium 6.1
    CVE-2017-7665

    Cross-site Scripting in Apache NiFi

    In Apache NiFi before 0.7.4 and 1.x before 1.3.0, there are certain user input components in the UI which had been guarding for some forms of XSS issues but were insufficient.

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi Maven