Skip to content
OpenAdvisories

Archive

23 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /23 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.8
    CVE-2018-1000015

    Incorrect permission checks in Pipeline: Nodes and Processes plugin

    On Jenkins instances with Authorize Project plugin, the authentication associated with a build may lack the Computer/Build permission on some agents. This did not prevent the execution of Pipeline `node` blocks on those agents due to incorrect permissions che…

    org.jenkins-ci.plugins.workflow:workflow-durable-task-step Maven
  • Medium 5.5
    CVE-2017-18049

    SilverStripe CSV Excel Macro Injection

    In the CSV export feature of SilverStripe before 3.5.6, 3.6.x before 3.6.3, and 4.x before 4.0.1, it's possible for the output to contain macros and scripts, which may be executed if imported without sanitization into common software (including Microsoft Exce…

    silverstripe/framework Packagist