Skip to content
OpenAdvisories

Archive

January 2018

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Low 2.2

    Improper Input Validation in Jenkins

    The Jenkins 2.73.1 and earlier, 2.83 and earlier default form control for passwords and other secrets, <f:password/>, supports form validation (e.g. for API keys). The form validation AJAX requests were sent via GET, which could result in secrets being logged…

  • Low 3.3

    In Malwarebytes Premium 3.3.1.2183, the driver file (FARFLT.SYS) allows local users to cause a denial of service (BSOD)…