Skip to content
OpenAdvisories

Archive

30 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /30 December 2017 →
  1. 133
  2. 223
  3. 333
  4. 417
  5. 54
  6. 629
  7. 744
  8. 821
  9. 933
  10. 1013
  11. 111
  12. 126
  13. 1397
  14. 1422
  15. 1591
  16. 16124
  17. 17100
  18. 184
  19. 191
  20. 2026
  21. 2119
  22. 22162
  23. 237
  24. 247
  25. 255
  26. 261
  27. 2755
  28. 2816
  29. 2916
  30. 3058
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2017-1000406

    Password change doesn't result in Karaf clearing cache

    OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared (e.g. via restart).

    org.opendaylight.integration:distribution-karaf Maven
  • High 7.5
    CVE-2017-14949

    Restlet Framework allows remote attackers to access arbitrary files via a crafted REST API HTTP request

    Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities (not parameter external entities) are properly considered. This is relate…

    restlet org.restlet.jse:org.restlet Ubuntu Maven
  • High 7.5
    CVE-2017-14868

    Restlet Framework Ja-rs extension is vulnerable to XXE when using SimpleXMLProvider

    Restlet Framework before 2.3.11, when using SimpleXMLProvider, allows remote attackers to access arbitrary files via an XXE attack in a REST API HTTP request. This affects use of the Jax-rs extension.

    restlet org.restlet.jse:org.restlet.ext.jaxrs Ubuntu Maven