Skip to content
OpenAdvisories

Archive

21 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /21 December 2017 →
  1. 133
  2. 223
  3. 333
  4. 417
  5. 54
  6. 629
  7. 744
  8. 821
  9. 933
  10. 1013
  11. 111
  12. 126
  13. 1397
  14. 1422
  15. 1591
  16. 16124
  17. 17100
  18. 184
  19. 191
  20. 2026
  21. 2119
  22. 22162
  23. 237
  24. 247
  25. 255
  26. 261
  27. 2755
  28. 2816
  29. 2916
  30. 3058
All Critical High Medium Low Exploited only Public exploit

19 results · Feed

  • Critical 9.8
    CVE-2017-7550

    Ansible Insertion of Sensitive Information into Log File vulnerability

    A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive information from a remote host's logs. This flaw was fixed by not…

    Red Hat Ansible ansible ansible Debian PyPI
  • Unscored —
    CVE-2015-3934 Public exploit

    Multiple SQL injection vulnerabilities in Fiyo CMS 2.0_1.9.1 allow remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2017-16664

    Code injection exists in Kernel/System/Spelling.pm in Open Ticket Request System (OTRS) 5 before 5.0.24, 4 before 4.0.2…

    otrs2 otrs2 Debian Ubuntu
  • Unscored —
    CVE-2017-16923

    Command Injection vulnerability in app_data_center on Shenzhen Tenda Ac9 US_AC9V1.0BR_V15.03.05.14_multi_TD01, Ac9 ac9_…

  • Unscored —
    CVE-2017-5712

    Buffer overflow in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.0/11.5/11.…

    Intel Active Management Technology
  • Unscored —
    CVE-2017-5729

    Frame replay vulnerability in Wi-Fi subsystem in Intel Dual-Band and Tri-Band Wireless-AC Products allows remote attack…

    Intel Dual-Band Wireless-AC and Tri-Band Wireless-AC linux-firmware Ubuntu
  • Unscored —
    CVE-2017-5711

    Multiple buffer overflows in Active Management Technology (AMT) in Intel Manageability Engine Firmware 8.x/9.x/10.x/11.…

    Intel Active Management Technology
  • Unscored —
    CVE-2017-5706

    Multiple buffer overflows in kernel in Intel Server Platform Services Firmware 4.0 allow attacker with local access to …

    Intel Server Platform Services
  • Unscored —
    CVE-2017-5710

    Multiple privilege escalations in kernel in Intel Trusted Execution Engine Firmware 3.0 allows unauthorized process to …

    Intel Trusted Execution Engine
  • Unscored —
    CVE-2017-5719

    A vulnerability in the Intel Deep Learning Training Tool Beta 1 allows a network attacker to remotely execute code as a…

    Intel Deep Learning Training Tool
  • Unscored —
    CVE-2017-5708

    Multiple privilege escalations in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow u…

    Intel Manageability Engine
  • Unscored —
    CVE-2017-5707

    Multiple buffer overflows in kernel in Intel Trusted Execution Engine Firmware 3.0 allow attacker with local access to …

    Intel Trusted Execution Engine
  • Unscored —
    CVE-2017-5709

    Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to …

    Intel Server Platform Services
  • Unscored —
    CVE-2017-5705

    Multiple buffer overflows in kernel in Intel Manageability Engine Firmware 11.0/11.5/11.6/11.7/11.10/11.20 allow attack…

    Intel Manageability Engine
  • Critical 9.8
    CVE-2017-16613

    OpenStack Swauth object/proxy server writing Auth Token to log file

    An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving (unhashed) tokens retrieved from the Swauth middleware authentication mechanism to a l…

    swauth swauth Ubuntu PyPI
  • Unscored —
    CVE-2017-16920

    v5/config/system.php in dayrui FineCms 5.2.0 has a default SYS_KEY value and does not require key regeneration for each…

  • Unscored —
    CVE-2017-15044

    The default installation of DocuWare Fulltext Search server through 6.11 allows remote users to connect to and download…

  • Unscored —
    CVE-2017-16840

    The VC-2 Video Compression encoder in FFmpeg 3.0 and 3.4 allows remote attackers to cause a denial of service (out-of-b…

    ffmpeg Debian
  • Unscored —
    CVE-2017-16919

    MapOS 3.1.11 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in /clientes/visualizar, which allows re…