Skip to content
OpenAdvisories

Archive

27 October 2017

Vulnerabilities first published on this day (UTC), newest first.

← September 2017 2017 / October /27 November 2017 →
  1. 110
  2. 264
  3. 343
  4. 456
  5. 543
  6. 635
  7. 7 
  8. 8 
  9. 913
  10. 1084
  11. 1155
  12. 1223
  13. 1398
  14. 143
  15. 156
  16. 1643
  17. 1741
  18. 1854
  19. 19229
  20. 2019
  21. 2112
  22. 2260
  23. 23118
  24. 2434
  25. 257
  26. 2631
  27. 27102
  28. 288
  29. 2930
  30. 3031
  31. 3146
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.8
    CVE-2017-13089 Public exploit EPSS 80%

    GNU Wget: stack overflow in HTTP protocol handling

    The http.c:skip_short_body() function is called in some circumstances, such as when processing redirects. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk len…

    GNU wget wget wget Debian Ubuntu Alpine
  • High 8.8
    CVE-2017-13090 EPSS 37%

    GNU Wget: heap overflow in HTTP protocol handling

    The retr.c:fd_read_body() function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol() to read each chunk's length, but doesn't check that the chunk length is a non-negative number. T…

    GNU wget wget wget Debian Ubuntu Alpine
  • High 7.8
    CVE-2016-5002

    Apache XML-RPC XXE Vulnerability

    XML external entity (XXE) vulnerability in the Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted DTD.

    org.apache.xmlrpc:xmlrpc Maven
  • High 7.5
    CVE-2017-15928

    Ox gem crashes due to a crafted input

    In the Ox gem 2.8.0 for Ruby, the process crashes with a segmentation fault when a crafted input is supplied to parse_obj. NOTE: the vendor has stated "Ox should handle the error more gracefully" but has not confirmed a security implication.

    ox ruby-ox ruby-ox Debian Ubuntu RubyGems
  • High 8.8
    CVE-2017-5070 Exploited EPSS 32%

    Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, …

    chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
    KEV Jun 8, 2022