Skip to content
OpenAdvisories

Archive

24 August 2017

Vulnerabilities first published on this day (UTC), newest first.

← July 2017 2017 / August /24 September 2017 →
  1. 129
  2. 268
  3. 313
  4. 438
  5. 523
  6. 610
  7. 7118
  8. 8316
  9. 984
  10. 1025
  11. 11100
  12. 12 
  13. 13 
  14. 1420
  15. 156
  16. 1620
  17. 1735
  18. 18176
  19. 195
  20. 205
  21. 2118
  22. 2226
  23. 2333
  24. 2436
  25. 2536
  26. 261
  27. 274
  28. 28104
  29. 2998
  30. 3051
  31. 3142
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2017-9511

    The MultiPathResource class in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers t…

    Atlassian Atlassian Fisheye and Crucible
  • High 7.5
    CVE-2017-9512

    The mostActiveCommitters.do resource in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote at…

    Atlassian Atlassian Fisheye and Crucible
  • High 7.5
    CVE-2017-11424

    PyJWT vulnerable to key confusion attacks

    In PyJWT 1.5.0 and below the `invalid_strings` check in `HMACAlgorithm.prepare_key` does not account for all PEM encoded public keys. Specifically, the PKCS1 PEM encoded format would be allowed because it is prefaced with the string `-----BEGIN RSA PUBLIC KEY…

    pyjwt pyjwt pyjwt Debian Ubuntu PyPI