Archive
24 January 2018
Vulnerabilities first published on this day (UTC), newest first.
52 results · Feed
-
High 8.8
Remote Code Execution in electron
GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitra…
-
High 7.5
Improper Limitation of a Pathname to a Restricted Directory in Jboss EAP Undertow
It was found that the AJP connector in undertow, as shipped in Jboss EAP 7.1.0.GA, does not use the ALLOW_ENCODED_SLASH option and thus allow the the slash / anti-slash characters encoded in the url which may lead to path traversal and result in the informati…
-
Medium 5.5CVE-2018-1047 Public exploit
Improper Input Validation in org.wildfly:wildfly-undertow
A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.
-
High 8.1
Cross-Site Request Forgery in Jenkins
A race condition during Jenkins 2.94 and earlier; 2.89.1 and earlier startup could result in the wrong order of execution of commands during initialization. There is a very short window of time after startup during which Jenkins may no longer show the 'Please…
-
High 8.8
Arbitrary shell command execution in Jenkins EC2 Plugin
Users with permission to create or configure agents in Jenkins 1.37 and earlier could configure an EC2 agent to run arbitrary shell commands on the master node whenever the agent was supposed to be launched. Configuration of these agents now requires the 'Run…
-
High 8.1
Race Condition in Jenkins
A race condition during Jenkins 2.81 through 2.94 (inclusive); 2.89.1 startup could result in the wrong order of execution of commands during initialization. This could in rare cases result in failure to initialize the setup wizard on the first startup. This …
-
Unscored —
libcurl 7.49.0 to and including 7.57.0 contains an out bounds read in code handling HTTP/2 trailers. It was reported (h…
-
Unscored —
libcurl 7.1 through 7.57.0 might accidentally leak authentication data to third parties. When asked to send custom head…
-
Unscored —CVE-2017-1000474 Public exploit
Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/ve…
-
Unscored —CVE-2018-6190 Public exploit
Netis WF2419 V3.2.41381 devices allow XSS via the Description field on the MAC Filtering page.
-
Unscored —CVE-2018-6193 Public exploit
A Cross-Site Scripting (XSS) vulnerability was found in Routers2 2.24, affecting the 'rtr' GET parameter in a page=grap…
-
Unscored —
In Artifex MuPDF 1.12.0, the pdf_read_new_xref function in pdf/pdf-xref.c allows remote attackers to cause a denial of …
-
Unscored —CVE-2018-6191 Public exploit
The js_strtod function in jsdtoa.c in Artifex MuJS through 1.0.2 has an integer overflow because of incorrect exponent …
-
Unscored —CVE-2018-5759 Public exploit
jsparse.c in Artifex MuJS through 1.0.2 does not properly maintain the AST depth for binary expressions, which allows r…
-
Unscored —CVE-2018-5705 Public exploit
Reservo Image Hosting 1.6 is vulnerable to XSS attacks. The affected function is its search engine (the t parameter to …
-
Critical 9.8
A vulnerability has been identified in Desigo PXC00-E.D V4.10 (All versions < V4.10.111), Desigo PXC00-E.D V5.00 (All v…
-
Unscored —
Fixed sizes of HTTPS responses in Tinder iOS app and Tinder Android app allow an attacker to extract private sensitive …
-
Unscored —
Unencrypted transmission of images in Tinder iOS app and Tinder Android app allows an attacker to extract private sensi…
-
Unscored —
An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Remote clients can take advantage of a …
-
Unscored —
RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request.
-
Unscored —
An issue was discovered in Ipswitch WhatsUp Gold before 2017 Plus SP1 (17.1.1). Multiple SQL injection vulnerabilities …
-
Unscored —
A buffer overflow vulnerability lies in the web server component of Dup Scout Enterprise 9.9.14, Disk Savvy Enterprise …
-
Unscored —
xorg-x11-server before 1.19.5 was missing extra length validation in ProcEstablishConnection function allowing maliciou…
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XFree86 VidModeExtension allowing malicious X client to …
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in X-Resource extension allowing malicious X client to caus…
-
Unscored —
xorg-x11-server before 1.19.5 had wrong extra length check in ProcXIChangeHierarchy function allowing malicious X clien…
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XFree86 DRI extension allowing malicious X client to cau…
-
Unscored —
xorg-x11-server before 1.19.5 was vulnerable to integer overflow in (S)ProcXIBarrierReleasePointer functions allowing m…
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in RENDER extension allowing malicious X client to cause X …
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XFree86 DGA extension allowing malicious X client to cau…
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XINERAMA extension allowing malicious X client to cause …
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in XFIXES extension allowing malicious X client to cause X …
-
Unscored —
xorg-x11-server before 1.19.5 was vulnerable to integer overflow in ProcDbeGetVisualInfo function allowing malicious X …
-
Unscored —
xorg-x11-server before 1.19.5 was missing length validation in MIT-SCREEN-SAVER extension allowing malicious X client t…
-
Unscored —
It was found that 389-ds-base since 1.3.6.1 up to and including 1.4.0.3 did not always handle internal hash comparison …
-
Unscored —
An information disclosure in ovirt-hosted-engine-setup prior to 2.2.7 reveals the root user's password in the log file.
-
Unscored —CVE-2017-1000475 Public exploit
FreeSSHd 1.3.1 version is vulnerable to an Unquoted Path Service allowing local users to launch processes with elevated…
-
Unscored —
IBM Business Process Manager 8.6 is vulnerable to cross-site request forgery which could allow an attacker to execute m…
-
Critical 9.8
Exposure of Sensitive Information in Hadoop
The YARN NodeManager in Apache Hadoop 2.7.3 and 2.7.4 can leak the password for credential store provider used by the NodeManager to YARN Applications.
-
Unscored —
In Artifex MuPDF 1.12.0, there is a heap-based buffer overflow vulnerability in the do_pdf_save_document function in th…