Archive

15 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /15 December 2017 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 5.4

CVE-2017-5532

TIBCO JasperReports persistent cross site scripting

A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO…

TIBCO Software TIBCO JasperReports Server TIBCO JasperReports Server for ActiveMatrix BPM TIBCO JasperReports Server - Community Edition Ubuntu

Nov 15, 2017
Medium 5.5

CVE-2014-0219

Improper Input Validation in Apache Karaf

Apache Karaf before 4.0.10 enables a shutdown port on the loopback interface, which allows local users to cause a denial of service (shutdown) by sending a shutdown command to all listening high ports.

org.apache.karaf:apache-karaf Maven

Nov 15, 2017
Medium 6.1

CVE-2017-16833

Gemirro Stored XSS in Gemspec "homepage" value

Stored cross-site scripting (XSS) vulnerability in Gemirro before 0.16.0 allows attackers to inject arbitrary web script via a crafted javascript: URL in the "homepage" value of a ".gemspec" file.

gemirro RubyGems

Nov 15, 2017