Skip to content
OpenAdvisories

Archive

29 September 2017

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Medium 4.3

    Apache Geode gfsh query vulnerability

    When a cluster is operating in secure mode, a user with read privileges for specific data regions can use the gfsh command line utility to execute queries. In Apache Geode before 1.2.1, the query results may contain data from another user's concurrently execu…

  • Medium 6.1

    eGroupware Community Edition Stored XSS vulnerability

    Stored XSS vulnerability in eGroupware Community Edition before 16.1.20170922 allows an unauthenticated remote attacker to inject JavaScript via the User-Agent HTTP header, which is mishandled during rendering by the application administrator.