Skip to content
OpenAdvisories

Archive

27 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /27 December 2017 →
  1. 133
  2. 223
  3. 333
  4. 417
  5. 54
  6. 629
  7. 744
  8. 821
  9. 933
  10. 1013
  11. 111
  12. 126
  13. 1397
  14. 1422
  15. 1591
  16. 16124
  17. 17100
  18. 184
  19. 191
  20. 2026
  21. 2119
  22. 22162
  23. 237
  24. 247
  25. 255
  26. 261
  27. 2755
  28. 2816
  29. 2916
  30. 3058
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2017-1001003

    Arbitrary Code Execution in mathjs

    math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object.

    math.js math.js mathjs npm
  • Critical 9.8
    CVE-2017-1001002

    Arbitrary Code Execution in mathjs

    math.js before 3.17.0 had an arbitrary code execution in the JavaScript engine. Creating a typed function with JavaScript code in the name could result arbitrary execution.

    math.js math.js mathjs npm
  • Critical 9.8
    CVE-2017-8045

    Deserialization of Untrusted Data in Spring AMQP

    In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code executio…

    org.springframework.amqp:spring-amqp Maven