Skip to content
OpenAdvisories

Archive

3 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /3 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2017-1000486 Exploited Public exploit Scanner template EPSS 94%

    Inadequate Encryption Strength

    Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

    org.primefaces:primefaces Maven
    KEV Jan 10, 2022
  • Critical 9.8
    CVE-2017-1000487 Public exploit

    OS Command Injection in Plexus-utils

    Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.

    plexus-utils2 org.codehaus.plexus:plexus-utils plexus-utils2 plexus-utils Debian Ubuntu Maven
  • Unscored —
    CVE-2017-1000479 Public exploit EPSS 32%

    pfSense versions 2.4.1 and lower are vulnerable to clickjacking attacks in the CSRF error page resulting in privileged …

  • High 8.8
    CVE-2017-1000499 Public exploit

    phpMyAdmin CSRF Vulnerability

    phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc.

    phpmyadmin/phpmyadmin Packagist