Skip to content
OpenAdvisories

Archive

August 2017

Vulnerabilities first published in this month (UTC), newest first.

← July 2017 2017 / August September 2017 →
  1. 129
  2. 268
  3. 313
  4. 438
  5. 523
  6. 610
  7. 7118
  8. 8316
  9. 984
  10. 1025
  11. 11100
  12. 12 
  13. 13 
  14. 1420
  15. 156
  16. 1620
  17. 1735
  18. 18176
  19. 195
  20. 205
  21. 2118
  22. 2226
  23. 2333
  24. 2436
  25. 2536
  26. 261
  27. 274
  28. 28104
  29. 2998
  30. 3051
  31. 3142
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.1
    CVE-2017-12973

    Nimbus JOSE+JWT vulnerable to padding oracle attack

    Nimbus JOSE+JWT before 4.39 proceeds improperly after detection of an invalid HMAC in authenticated AES-CBC decryption, which allows attackers to conduct a padding oracle attack.

    com.nimbusds:nimbus-jose-jwt Maven
  • Low 3.1
    CVE-2015-7561

    Kubernetes in OpenShift3 Access Control Misconfiguration

    Kubernetes in OpenShift3 allows remote authenticated users to use the private images of other users should they know the name of said image.

    k8s.io/kubernetes Go
  • Low 3.4
    CVE-2017-9856

    An issue was discovered in SMA Solar Technology products. Sniffed passwords from SMAdata2+ communication can be decrypt…