Archive

14 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /14 December 2017 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Unscored —

CVE-2017-12636 Public exploit EPSS 91%

CouchDB administrative users can configure the database server via HTTP(S). Some of the configuration options include p…

Apache Software Foundation Apache CouchDB couchdb Ubuntu

Nov 14, 2017
Unscored —

CVE-2017-12635 Public exploit Scanner template EPSS 100%

Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB b…

Apache Software Foundation Apache CouchDB couchdb Ubuntu

Nov 14, 2017
Medium 5.5

CVE-2017-12624 Public exploit

Improper Input Validation in Apache CXF

Apache CXF supports sending and receiving attachments via either the JAX-WS or JAX-RS specifications. It is possible to craft a message attachment header that could lead to a Denial of Service (DoS) attack on a CXF web service provider. Both JAX-WS and JAX-RS…

Apache Software Foundation Apache CXF org.apache.cxf:cxf-core Maven

Nov 14, 2017