Skip to content
OpenAdvisories

Archive

January 2018

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2017-1000353 Exploited Public exploit EPSS 100%

    Deserialization of Untrusted Data in Jenkins

    Jenkins versions 2.56 and earlier as well as 2.46.1 LTS and earlier are vulnerable to an unauthenticated remote code execution. An unauthenticated remote code execution vulnerability allowed attackers to transfer a serialized Java `SignedObject` object to the…

    KEV Oct 2, 2025
  • Critical 9.8
    CVE-2017-1000486 Exploited Public exploit Scanner template EPSS 94%

    Inadequate Encryption Strength

    Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution

    KEV Jan 10, 2022