Skip to content
OpenAdvisories

Archive

20 September 2017

Vulnerabilities first published on this day (UTC), newest first.

← August 2017 2017 / September /20 October 2017 →
  1. 130
  2. 24
  3. 39
  4. 412
  5. 526
  6. 626
  7. 777
  8. 858
  9. 914
  10. 102
  11. 1182
  12. 1250
  13. 13136
  14. 14130
  15. 1526
  16. 16 
  17. 1720
  18. 1859
  19. 1945
  20. 2051
  21. 2182
  22. 2241
  23. 2311
  24. 24 
  25. 2568
  26. 2630
  27. 2750
  28. 2840
  29. 2948
  30. 301
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.1
    CVE-2015-1865

    fts.c in coreutils 8.4 allows local users to delete arbitrary files.

    coreutils Debian
  • Medium 6.1
    CVE-2015-1866

    ember-source vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in Ember.js 1.10.x before 1.10.1 and 1.11.x before 1.11.2.

    ember-source RubyGems
  • Medium 6.1
    CVE-2015-4707

    Improper Neutralization of Input During Web Page Generation in IPython

    Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path.

    ipython ipython Debian PyPI
  • Medium 5.9
    CVE-2016-8738

    Apache Struts vulnerable to possible DoS attack when using URLValidator

    In Apache Struts 2.5 through 2.5.5, if an application allows entering a URL in a form field and the built-in URLValidator is used, it is possible to prepare a special URL which will be used to overload server process when performing validation of the URL.

    Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven