Archive

20 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /20 February 2018 →

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

High 7.5

CVE-2017-12130

An exploitable NULL pointer dereference vulnerability exists in the tinysvcmdns library version 2017-11-05. A specially…

Talos Tinysvcmdns

Jan 20, 2018
Medium 5.5

CVE-2017-15111

keycloak-httpd-client-install symlink attack vulnerability

keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link.

jdennis keycloak-httpd-client-install keycloak-httpd-client-install PyPI

Jan 20, 2018
Unscored —

CVE-2017-15108

spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing loca…

Red Hat spice-vdagent spice-vdagent spice-vdagent Debian Ubuntu

Jan 20, 2018
High 7.8

CVE-2017-15112

keycloak-httpd-client-install Insecure Secrets

keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command history and process info to other local users.

jdennis keycloak-httpd-client-install keycloak-httpd-client-install PyPI

Jan 20, 2018
Unscored —

CVE-2017-14803 EPSS 35%

In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloadi…

Micro Focus NetIQ Access Manager

Jan 20, 2018