Skip to content
OpenAdvisories

Archive

10 October 2017

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2015-8239 Public exploit

    The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts o…

  • Unscored —
    CVE-2015-2856 Public exploit EPSS 57%

    Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices…

  • High 7.5
    CVE-2017-5637 Public exploit EPSS 73%

    Uncontrolled Resource Consumption in Apache ZooKeeper

    Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suff…