Skip to content
OpenAdvisories

Archive

18 December 2017

Vulnerabilities first published on this day (UTC), newest first.

← November 2017 2017 / December /18 January 2018 →
  1. 141
  2. 26
  3. 38
  4. 422
  5. 560
  6. 657
  7. 730
  8. 830
  9. 986
  10. 103
  11. 1152
  12. 1258
  13. 13104
  14. 1435
  15. 1536
  16. 165
  17. 174
  18. 1831
  19. 1913
  20. 20134
  21. 2151
  22. 2235
  23. 2316
  24. 2428
  25. 2540
  26. 2619
  27. 2723
  28. 2826
  29. 2926
  30. 3024
  31. 314
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2017-15700

    Apache Sling Authentication Service vulnerability

    A flaw in the org.apache.sling.auth.core.AuthUtil#isRedirectValid method in Apache Sling Authentication Service 1.4.0 allows an attacker, through the Sling login form, to trick a victim to send over their credentials.

    Apache Software Foundation Apache Sling org.apache.sling:org.apache.sling.auth.core Maven
  • High 7.8
    CVE-2017-15104

    Information Exposure in Heketi

    An access flaw was found in Heketi 5, where the heketi.json configuration file was world readable. An attacker having local access to the Heketi server could read plain-text passwords from the heketi.json file.

    Heketi Heketi github.com/heketi/heketi Go
  • High 8.8
    CVE-2017-15103

    Heketi Arbitrary Code Execution

    A security-check flaw was found in the way the Heketi 5 server API handled user requests. An authenticated Heketi user could send specially crafted requests to the Heketi server, resulting in remote command execution as the user running Heketi server and poss…

    Heketi Heketi github.com/heketi/heketi Go