Skip to content
OpenAdvisories

Archive

13 July 2017

Vulnerabilities first published on this day (UTC), newest first.

← June 2017 2017 / July /13 August 2017 →
  1. 12
  2. 212
  3. 315
  4. 430
  5. 5180
  6. 669
  7. 774
  8. 88
  9. 93
  10. 1033
  11. 1163
  12. 1239
  13. 1392
  14. 1472
  15. 15 
  16. 1613
  17. 1758
  18. 1828
  19. 1930
  20. 2087
  21. 2135
  22. 2213
  23. 2335
  24. 2437
  25. 2554
  26. 2636
  27. 2729
  28. 2830
  29. 2912
  30. 3014
  31. 3166
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.1
    CVE-2017-1000043

    Content Injection via TileJSON Name in mapbox.js

    Mapbox.js versions 1.x prior to 1.6.6 and 2.x prior to 2.2.4 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON name and map share control

    mapbox.js mapbox-rails npm RubyGems
  • Medium 5.9
    CVE-2017-1000007

    txAWS AWSServiceEndpoint defaults to not verifying server certificates

    txAWS (all current versions) fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure.

    txaws txaws Ubuntu PyPI
  • Medium 6.1
    CVE-2017-1000006

    Cross Site Scripting (XSS) in plotly.js

    Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.

    plotly.js npm
  • Medium 6.1
    CVE-2017-1000015

    phpMyAdmin CSS Injection Vulnerability

    phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to a CSS injection attack through crafted cookie parameters

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist
  • Medium 6.1
    CVE-2017-1000013

    phpMyAdmin Open Redirect

    phpMyAdmin 4.0, 4.4, and 4.6 are vulnerable to an open redirect weakness

    phpmyadmin phpmyadmin phpmyadmin/phpmyadmin Debian Ubuntu Packagist
  • Medium 6.1
    CVE-2017-1000070

    Open Redirect in oauth2_proxy

    The Bitly oauth2_proxy in version 2.1 and earlier was affected by an open redirect vulnerability during the start and termination of the 2-legged OAuth flow. This issue was caused by improper input validation and a violation of RFC-6819

    github.com/bitly/oauth2_proxy Go
  • Medium 6.1
    CVE-2017-1000042

    Content Injection via TileJSON attribute in mapbox.js

    Mapbox.js versions 1.x prior to 1.6.5 and 2.x prior to 2.1.7 are vulnerable to a cross-site-scripting attack in certain uncommon usage scenarios via TileJSON Name.

    mapbox-rails mapbox.js npm RubyGems
  • Medium 5.9
    CVE-2017-7672

    Apache Struts Improper Input Validation vulnerability

    If an application allows enter an URL in a form field and built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL. Solution is to upgrade to Apache Struts versi…

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven