Skip to content
OpenAdvisories

Archive

18 August 2017

Vulnerabilities first published on this day (UTC), newest first.

← July 2017 2017 / August /18 September 2017 →
  1. 129
  2. 268
  3. 313
  4. 438
  5. 523
  6. 610
  7. 7118
  8. 8316
  9. 984
  10. 1025
  11. 11100
  12. 12 
  13. 13 
  14. 1420
  15. 156
  16. 1620
  17. 1735
  18. 18176
  19. 195
  20. 205
  21. 2118
  22. 2226
  23. 2333
  24. 2436
  25. 2536
  26. 261
  27. 274
  28. 28104
  29. 2998
  30. 3051
  31. 3142
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2017-8446

    Improper Privilege Management in X-Pack

    The Reporting feature in X-Pack in versions prior to 5.5.2 and standalone Reporting plugin versions versions prior to 2.4.6 had an impersonation vulnerability. A user with the reporting_user role could execute a report with the permissions of another reportin…

    Elastic Elastic X-Pack Reporting org.elasticsearch.plugin:x-pack Maven
  • Medium 5.4
    CVE-2017-12882

    Spring Batch Admin vulnerable to Stored Cross-site scripting (XSS) in the file upload functionality

    Stored Cross-site scripting (XSS) vulnerability in Spring Batch Admin before 1.3.0 allows remote authenticated users to inject arbitrary JavaScript or HTML via the file upload functionality.

    org.springframework.batch:spring-batch-admin-manager Maven
  • Medium 6.5
    CVE-2015-4082

    attic has improper verification of unencrypted backups

    attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write privileges for the encrypted repository to obtain potentially sensitive information by changing the manifest type byte of the repository to…

    attic attic Ubuntu PyPI