Skip to content
OpenAdvisories

Archive

19 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /19 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 4.0
    CVE-2017-12118

    An exploitable improper authorization vulnerability exists in miner_stop API of cpp-ethereum's JSON-RPC (commit 4e10157…

    Talos CPP-Ethereum
  • Medium 6.8
    CVE-2017-12116

    An exploitable improper authorization vulnerability exists in miner_setGasPrice API of cpp-ethereum's JSON-RPC (commit …

    Talos CPP-Ethereum
  • Medium 4.0
    CVE-2017-12113

    An exploitable improper authorization vulnerability exists in admin_nodeInfo API of cpp-ethereum's JSON-RPC (commit 4e1…

    Talos CPP-Ethereum
  • Medium 4.0
    CVE-2017-12114

    An exploitable improper authorization vulnerability exists in admin_peers API of cpp-ethereum's JSON-RPC (commit 4e1015…

    Talos CPP-Ethereum
  • Medium 4.0
    CVE-2017-12112

    An exploitable improper authorization vulnerability exists in admin_addPeer API of cpp-ethereum's JSON-RPC (commit 4e10…

    Talos CPP-Ethereum
  • Medium 4.0
    CVE-2017-12117

    An exploitable improper authorization vulnerability exists in miner_start API of cpp-ethereum's JSON-RPC (commit 4e1015…

    Talos CPP-Ethereum
  • Medium 6.8
    CVE-2017-12115

    An exploitable improper authorization vulnerability exists in miner_setEtherbase API of cpp-ethereum's JSON-RPC (commit…

    Talos CPP-Ethereum
  • Medium 6.1
    CVE-2017-12097

    delayed_job_web Cross-site Scripting vulnerability

    An exploitable cross site scripting (XSS) vulnerability exists in the filter functionality of the delayed_job_web rails gem version 1.4. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the v…

    Talos delayed_job_web rails gem delayed_job_web RubyGems
  • Medium 6.1
    CVE-2017-12098

    rails_admin ruby gem XSS

    An exploitable cross site scripting (XSS) vulnerability exists in the add filter functionality of the rails_admin rails gem version 1.2.0. A specially crafted URL can cause an XSS flaw resulting in an attacker being able to execute arbitrary javascript on the…

    rails_admin ruby-rails-admin Ubuntu RubyGems
  • Medium 6.5
    CVE-2017-15713

    Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main

    Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct…

    Apache Software Foundation Apache Hadoop org.apache.hadoop:hadoop-main Maven