Skip to content
OpenAdvisories

Archive

30 October 2017

Vulnerabilities first published on this day (UTC), newest first.

← September 2017 2017 / October /30 November 2017 →
  1. 110
  2. 264
  3. 343
  4. 456
  5. 543
  6. 635
  7. 7 
  8. 8 
  9. 913
  10. 1084
  11. 1155
  12. 1223
  13. 1398
  14. 143
  15. 156
  16. 1643
  17. 1741
  18. 1854
  19. 19229
  20. 2019
  21. 2112
  22. 2260
  23. 23118
  24. 2434
  25. 257
  26. 2631
  27. 27102
  28. 288
  29. 2930
  30. 3031
  31. 3146
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2012-0881 EPSS 17%

    Denial of service in Apache Xerces2

    Apache Xerces2 Java Parser before 2.12.0 allows remote attackers to cause a denial of service (CPU consumption) via a crafted message to an XML service, which triggers hash table collisions.

    xerces:xercesImpl libxerces2-java libxerces2-java Debian Ubuntu Maven
  • High 7.5
    CVE-2014-0115

    Apache Storm log viewer path traversal vulnerability

    Directory traversal vulnerability in the log viewer in Apache Storm 0.9.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to log.

    org.apache.storm:storm Maven
  • High 7.5
    CVE-2015-0226

    Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J

    Apache WSS4J before 1.6.17 and 2.0.x before 2.0.2 improperly leaks information about decryption failures when decrypting an encrypted key or message data, which makes it easier for remote attackers to recover the plaintext form of a symmetric key via a series…

    wss4j org.apache.ws.security:wss4j org.apache.wss4j:wss4j-ws-security-dom Debian Maven
  • High 7.5
    CVE-2014-3526

    Apache Wicket Sensitive Data Exposure

    Apache Wicket before 1.5.12, 6.x before 6.17.0, and 7.x before 7.0.0-M3 might allow remote attackers to obtain sensitive information via vectors involving identifiers for storing page markup for temporary user sessions.

    org.apache.wicket:wicket-core Maven
  • High 8.8
    CVE-2016-3090

    Apache Struts RCE Vulnerability

    The TextParseUtil.translateVariables method in Apache Struts 2.x before 2.3.20 allows remote attackers to execute arbitrary code via a crafted OGNL expression with ANTLR tooling.

    org.apache.struts:struts2-parent Maven