Skip to content
OpenAdvisories

Archive

24 October 2017

Vulnerabilities first published on this day (UTC), newest first.

← September 2017 2017 / October /24 November 2017 →
  1. 110
  2. 264
  3. 343
  4. 456
  5. 543
  6. 635
  7. 7 
  8. 8 
  9. 913
  10. 1084
  11. 1155
  12. 1223
  13. 1398
  14. 143
  15. 156
  16. 1643
  17. 1741
  18. 1854
  19. 19229
  20. 2019
  21. 2112
  22. 2260
  23. 23118
  24. 2434
  25. 257
  26. 2631
  27. 27102
  28. 288
  29. 2930
  30. 3031
  31. 3146
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2015-5172

    Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password

    Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire password reset links.

    org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Critical 9.8
    CVE-2015-5171

    Cloud Foundry Runtime Insufficient Session Expiration vulnerability

    The password change functionality in Cloud Foundry Runtime cf-release before 216, UAA before 2.5.2, and Pivotal Cloud Foundry (PCF) Elastic Runtime before 1.7.0 allow attackers to have unspecified impact by leveraging failure to expire existing sessions.

    org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Critical 9.8
    CVE-2017-14695

    SaltStack Salt Directory traversal vulnerability in minion id validation

    Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: t…

    salt salt Ubuntu PyPI