Skip to content
OpenAdvisories

Archive

6 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /6 December 2017 →
  1. 133
  2. 223
  3. 333
  4. 417
  5. 54
  6. 629
  7. 744
  8. 821
  9. 933
  10. 1013
  11. 111
  12. 126
  13. 1397
  14. 1422
  15. 1591
  16. 16124
  17. 17100
  18. 184
  19. 191
  20. 2026
  21. 2119
  22. 22162
  23. 237
  24. 247
  25. 255
  26. 261
  27. 2755
  28. 2816
  29. 2916
  30. 3058
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.8
    CVE-2015-7529

    SoSReport Predictable Tmp File Names

    sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sosreport-$hostname-$date.tar in /tmp/sosreport-$hostname-$dat…

    sosreport sosreport sosreport Debian Ubuntu PyPI
  • High 7.6
    CVE-2017-7425

    Multiple Reflected XSS in iManager

    Multiple potential reflected XSS issues exist in NetIQ iManager versions before 2.7.7 Patch 10 HF2 and 3.0.3.2.

    NetIQ NetIQ iManager
  • High 8.8
    CVE-2017-16570 Public exploit

    Cross-Site Request Forgery (CSRF) in keystone

    KeystoneJS before 4.0.0-beta.7 allows application-wide CSRF bypass by removing the CSRF parameter and value, aka SecureLayer7 issue number SL7_KEYJS_03. In other words, it fails to reject requests that lack an x-csrf-token header.

    keystone npm