Skip to content
OpenAdvisories

Archive

16 June 2017

Vulnerabilities first published on this day (UTC), newest first.

← May 2017 2017 / June /16 July 2017 →
  1. 113
  2. 234
  3. 39
  4. 43
  5. 529
  6. 649
  7. 759
  8. 868
  9. 968
  10. 10 
  11. 113
  12. 1227
  13. 13121
  14. 1437
  15. 15112
  16. 1674
  17. 172
  18. 182
  19. 1938
  20. 2031
  21. 2132
  22. 2219
  23. 2313
  24. 247
  25. 2510
  26. 2629
  27. 2753
  28. 2818
  29. 2938
  30. 3035
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2016-1000221

    Logstash Logs Sensitive Information

    Logstash prior to version 2.3.4, Elasticsearch Output plugin would log to file HTTP authorization headers which could contain sensitive information.

    logstash-core RubyGems
  • High 7.5
    CVE-2017-9735

    Jetty vulnerable to exposure of sensitive information due to observable discrepancy

    Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain access by observing elapsed times before rejection of incorrect passwords.

    jetty9 jetty9 org.eclipse.jetty:jetty-server jetty Debian Ubuntu Maven