Skip to content
OpenAdvisories

Archive

25 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /25 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.0
    CVE-2017-15703

    Denial of service via deserialization attack in nifi

    Any authenticated user (valid client certificate but without ACL permissions) could upload a template which contained malicious code and caused a denial of service via Java deserialization attack. The fix to properly handle Java deserialization was applied on…

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi-framework-cluster-protocol Maven
  • Medium 6.5
    CVE-2017-1000505

    Exposure of Sensitive Information to an Unauthorized Actor Jenkins Script Security Plugin

    In Jenkins Script Security Plugin version 1.36 and earlier, users with the ability to configure sandboxed Groovy scripts are able to use a type coercion feature in Groovy to create new `File` objects from strings. This allowed reading arbitrary files on the J…

    org.jenkins-ci.plugins:script-security Maven