Skip to content
OpenAdvisories

Archive

18 August 2017

Vulnerabilities first published on this day (UTC), newest first.

← July 2017 2017 / August /18 September 2017 →
  1. 129
  2. 268
  3. 313
  4. 438
  5. 523
  6. 610
  7. 7118
  8. 8316
  9. 984
  10. 1025
  11. 11100
  12. 12 
  13. 13 
  14. 1420
  15. 156
  16. 1620
  17. 1735
  18. 18176
  19. 195
  20. 205
  21. 2118
  22. 2226
  23. 2333
  24. 2436
  25. 2536
  26. 261
  27. 274
  28. 28104
  29. 2998
  30. 3051
  31. 3142
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.8
    CVE-2015-5081

    django-cms CSRF Vulnerability

    Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privileged users into performing unknown actions via unspecified vectors.

    django-cms PyPI
  • High 8.8
    CVE-2017-12881

    Spring Batch Admin vulnerable to Cross-site request forgery (CSRF) in the file upload functionality

    Cross-site request forgery (CSRF) vulnerability in the Spring Batch Admin before 1.3.0 allows remote attackers to hijack the authentication of unspecified victims and submit arbitrary requests, such as exploiting the file upload vulnerability.

    org.springframework.batch:spring-batch-admin-manager Maven
  • High 7.5
    CVE-2017-11185

    The gmp plugin in strongSwan before 5.6.0 allows remote attackers to cause a denial of service (NULL pointer dereferenc…

    strongswan strongswan strongswan Debian Ubuntu Alpine
  • High 7.8
    CVE-2015-3649

    open-uri-cached Gem for Ruby Unsafe Temporary File Creation Enables Code Execution

    The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp containing "openuri-" followed by a crafted UID, and putting Ruby code in said directory once a meta file is created.

    open-uri-cached RubyGems
  • High 7.5
    CVE-2017-12440

    Openstack Aodh can be used to launder Keystone trusts

    Aodh as packaged in Openstack Ocata and Newton before change-ID I8fd11a7f9fe3c0ea5f9843a89686ac06713b7851 and before Pike-rc1 does not verify that trust IDs belong to the user when creating alarm action with the scheme trust+http, which allows remote authenti…

    aodh aodh aodh Debian Ubuntu PyPI