Skip to content
OpenAdvisories

Archive

November 2017

Vulnerabilities first published in this month (UTC), newest first.

← October 2017 2017 / November December 2017 →
  1. 133
  2. 223
  3. 333
  4. 417
  5. 54
  6. 629
  7. 744
  8. 821
  9. 933
  10. 1013
  11. 111
  12. 126
  13. 1397
  14. 1422
  15. 1591
  16. 16124
  17. 17100
  18. 184
  19. 191
  20. 2026
  21. 2119
  22. 22162
  23. 237
  24. 247
  25. 255
  26. 261
  27. 2755
  28. 2816
  29. 2916
  30. 3058
All Critical High Medium Low Exploited only Public exploit

48 results · Clear filters · Feed

  • Critical 9.0
    CVE-2017-2911

    An exploitable vulnerability exists in the remote control functionality of Circle with Disney running firmware 2.0.1. S…

    Circle Media Circle
  • Critical 9.9
    CVE-2017-2890

    An exploitable vulnerability exists in the /api/CONFIG/restore functionality of Circle with Disney running firmware 2.0…

    Circle Media Circle
  • Critical 9.6
    CVE-2017-2881

    An exploitable vulnerability exists in the torlist update functionality of Circle with Disney running firmware 2.0.1. S…

    Circle Media Circle
  • Critical 9.8
    CVE-2017-2922

    An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8.…

    Cesanta Software mongoose smplayer Debian
  • Critical 9.0
    CVE-2017-2915

    An exploitable vulnerability exists in the WiFi configuration functionality of Circle with Disney running firmware 2.0.…

    Circle Media Circle
  • Critical 9.0
    CVE-2017-2882

    An exploitable vulnerability exists in the servers update functionality of Circle with Disney running firmware 2.0.1. S…

    Circle Media Circle
  • Critical 9.8
    CVE-2017-11767

    ChakraCore vulnerable to privilege escalation

    ChakraCore allows an attacker to gain the same user rights as the current user, due to the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability".

    Microsoft ChakraCore Microsoft.ChakraCore NuGet
  • Critical 9.8
    CVE-2017-1000245

    Jenkins SSH Plugin user passwords for encrypted SSH keys stored in plaintext

    The SSH Plugin stores credentials which allow jobs to access remote servers via the SSH protocol. User passwords and passphrases for encrypted SSH keys are stored in plaintext in a configuration file.

    org.jenkins-ci.plugins:ssh org.jvnet.hudson.plugins:ssh Maven