Skip to content
OpenAdvisories

Archive

10 October 2017

Vulnerabilities first published on this day (UTC), newest first.

← September 2017 2017 / October /10 November 2017 →
  1. 110
  2. 264
  3. 343
  4. 456
  5. 543
  6. 635
  7. 7 
  8. 8 
  9. 913
  10. 1084
  11. 1155
  12. 1223
  13. 1398
  14. 143
  15. 156
  16. 1643
  17. 1741
  18. 1854
  19. 19229
  20. 2019
  21. 2112
  22. 2260
  23. 23118
  24. 2434
  25. 257
  26. 2631
  27. 27102
  28. 288
  29. 2930
  30. 3031
  31. 3146
All Critical High Medium Low Exploited only Public exploit

84 results · Feed

  • Unscored —
    CVE-2017-15210

    In Kanboard before 1.0.47, by altering form data, an authenticated user can see thumbnails of pictures from a private p…

  • Unscored —
    CVE-2017-15215

    Reflected XSS vulnerability in Shaarli v0.9.1 allows an unauthenticated attacker to inject JavaScript via the searchtag…

  • Unscored —
    CVE-2017-15202

    In Kanboard before 1.0.47, by altering form data, an authenticated user can edit columns of a private project of anothe…

  • High 7.5
    CVE-2017-5637 Public exploit EPSS 73%

    Uncontrolled Resource Consumption in Apache ZooKeeper

    Two four letter word commands "wchp/wchc" are CPU intensive and could cause spike of CPU utilization on Apache ZooKeeper server if abused, which leads to the server unable to serve legitimate client requests. Apache ZooKeeper thru version 3.4.9 and 3.5.2 suff…

    Apache Software Foundation Apache ZooKeeper zookeeper zookeeper Debian Ubuntu Maven