Archive

29 August 2017

Vulnerabilities first published on this day (UTC), newest first.

← July 2017 2017 / August /29 September 2017 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 7.5

CVE-2016-8752

Path Traversal in Apache Atlas

Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.

Apache Software Foundation Apache Atlas org.apache.atlas:atlas-common apache-atlas Maven PyPI

Aug 29, 2017
High 7.5

CVE-2017-3154

Apache Atlas produces Stack trace in error response

Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information.

Apache Software Foundation Apache Atlas apache-atlas org.apache.atlas:atlas-common Maven PyPI

Aug 29, 2017
High 7.5

CVE-2015-5209

Special top object can be used to access Struts' internals

Apache Struts 2.x before 2.3.24.1 allows remote attackers to manipulate Struts internals, alter user sessions, or affect container settings via vectors involving a top object.

org.apache.struts:struts2-core Maven

Aug 29, 2017