Skip to content
OpenAdvisories

Archive

24 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /24 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.8
    CVE-2018-1000006 Public exploit EPSS 89%

    Remote Code Execution in electron

    GitHub Electron versions 1.8.2-beta.3 and earlier, 1.7.10 and earlier, 1.6.15 and earlier has a vulnerability in the protocol handler, specifically Electron apps running on Windows 10, 7 or 2008 that register custom protocol handlers can be tricked in arbitra…

    electron npm
  • High 7.5
    CVE-2018-1048

    Improper Limitation of a Pathname to a Restricted Directory in Jboss EAP Undertow

    It was found that the AJP connector in undertow, as shipped in Jboss EAP 7.1.0.GA, does not use the ALLOW_ENCODED_SLASH option and thus allow the the slash / anti-slash characters encoded in the url which may lead to path traversal and result in the informati…

    Red Hat undertow as shipped in Jboss EAP 7.1.0.GA undertow undertow Debian Ubuntu Maven
  • High 8.1
    CVE-2017-1000504

    Cross-Site Request Forgery in Jenkins

    A race condition during Jenkins 2.94 and earlier; 2.89.1 and earlier startup could result in the wrong order of execution of commands during initialization. There is a very short window of time after startup during which Jenkins may no longer show the 'Please…

    org.jenkins-ci.main:jenkins-core Maven
  • High 8.8
    CVE-2017-1000502

    Arbitrary shell command execution in Jenkins EC2 Plugin

    Users with permission to create or configure agents in Jenkins 1.37 and earlier could configure an EC2 agent to run arbitrary shell commands on the master node whenever the agent was supposed to be launched. Configuration of these agents now requires the 'Run…

    org.jenkins-ci.plugins:ec2 Maven
  • High 8.1
    CVE-2017-1000503

    Race Condition in Jenkins

    A race condition during Jenkins 2.81 through 2.94 (inclusive); 2.89.1 startup could result in the wrong order of execution of commands during initialization. This could in rare cases result in failure to initialize the setup wizard on the first startup. This …

    org.jenkins-ci.main:jenkins-core Maven
  • High 7.5
    CVE-2018-6184 Scanner template

    Directory traversal vulnerability in Next.js

    ZEIT Next.js 4 before 4.2.3 has Directory Traversal under the /_next request namespace.

    next npm