Skip to content
OpenAdvisories

Archive

14 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /14 December 2017 →
  1. 133
  2. 223
  3. 333
  4. 417
  5. 54
  6. 629
  7. 744
  8. 821
  9. 933
  10. 1013
  11. 111
  12. 126
  13. 1397
  14. 1422
  15. 1591
  16. 16124
  17. 17100
  18. 184
  19. 191
  20. 2026
  21. 2119
  22. 22162
  23. 237
  24. 247
  25. 255
  26. 261
  27. 2755
  28. 2816
  29. 2916
  30. 3058
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2017-10266

    Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that …

    Oracle Tuxedo
  • Unscored —
    CVE-2017-10267

    Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that …

    Oracle Tuxedo
  • Unscored —
    CVE-2017-10269

    Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that …

    Oracle Tuxedo
  • Unscored —
    CVE-2017-10272

    Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that …

    Oracle Tuxedo
  • Unscored —
    CVE-2017-10278

    Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Security). Supported versions t…

    Oracle Tuxedo
  • Unscored —
    CVE-2017-16820

    The csnmp_read_table function in snmp.c in the SNMP plugin in collectd before 5.6.3 is susceptible to a double free in …

    collectd collectd collectd Debian Ubuntu Alpine
  • Low 1.9
    CVE-2017-3893

    Incomplete vulnerability mitigations

    In BlackBerry QNX Software Development Platform (SDP) 6.6.0, the default configuration of the QNX SDP system did not in all circumstances prevent attackers from modifying the GOT or PLT tables with buffer overflow attacks.

    BlackBerry QNX Software Development Platform (QNX SDP)
  • Low 3.8
    CVE-2017-3892

    In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an information disclosure vulnerability in the default con…

    BlackBerry QNX Software Development Platform (SDP)
  • Critical 9.6
    CVE-2017-3891

    In BlackBerry QNX Software Development Platform (SDP) 6.6.0, an elevation of privilege vulnerability in the default con…

    BlackBerry QNX Software Development Platform (QNX SDP)
  • Low 3.8
    CVE-2017-9369

    In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, an information disclosure vulner…

    BlackBerry QNX Software Development Platform (SDP)
  • Low 2.6
    CVE-2017-9371

    In BlackBerry QNX Software Development Platform (SDP) 6.6.0 and 6.5.0 SP1 and earlier, a loss of integrity vulnerabilit…

    BlackBerry QNX Software Development Platform (QNX SDP)
  • Unscored —
    CVE-2017-9394

    A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to dis…

    CA Technologies CA Identity Governance
  • Unscored —
    CVE-2017-12636 Public exploit EPSS 91%

    CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include p…

    Apache Software Foundation Apache CouchDB couchdb Ubuntu
  • Unscored —
    CVE-2017-12635 Public exploit Scanner template EPSS 100%

    Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB b…

    Apache Software Foundation Apache CouchDB couchdb Ubuntu
  • Unscored —
    CVE-2017-16815

    installer.php in the Snap Creek Duplicator (WordPress Site Migration & Backup) plugin before 1.2.30 for WordPress has X…

  • Medium 6.5
    CVE-2017-16239

    OpenStack Nova Filter Scheduler Bypass

    In OpenStack Nova through 14.0.9, 15.x through 15.0.7, and 16.x through 16.0.2, by rebuilding an instance, an authenticated user may be able to circumvent the Filter Scheduler bypassing imposed filters (for example, the ImagePropertiesFilter or the IsolatedHo…

    nova nova nova Debian Ubuntu PyPI
  • Unscored —
    CVE-2017-6264

    An elevation of privilege vulnerability exists in the NVIDIA GPU driver (gm20b_clk_throt_set_cdev_state), where an out …

    NVIDIA Android Android
  • Unscored —
    CVE-2017-9085

    Multiple cross-site scripting (XSS) vulnerabilities in Kodak InSite 6.5 to 8.0 allow remote attackers to inject arbitra…

  • Medium 5.5
    CVE-2017-12624 Public exploit

    Improper Input Validation in Apache CXF

    Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service (DoS) attack on a CXF web service provider. Both JAX-WS and JAX-RS…

    Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven
  • Unscored —
    CVE-2017-6274

    An elevation of Privilege vulnerability exists in the Thermal Driver, where a missing bounds checks in the thermal thro…

    NVIDIA Pixel
  • Unscored —
    CVE-2017-6275

    An information disclosure vulnerability exists in the Thermal Driver, where a missing bounds checking in the thermal dr…

    NVIDIA Pixel
  • Unscored —
    CVE-2017-16810

    Cross-site scripting (XSS) vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 (fixed in 3.13.7) allo…