Archive

January 2018

Vulnerabilities first published in this month (UTC), newest first.

← December 2017 2018 / January February 2018 →

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

Medium 5.5

CVE-2018-1047 Public exploit

Improper Input Validation in org.wildfly:wildfly-undertow

A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.

Red Hat wildfly undertow org.wildfly:wildfly-undertow Ubuntu Maven

Jan 24, 2018
Medium 6.5

CVE-2018-1042 Public exploit EPSS 16%

Moodle SSRF Vulnerability

Moodle 3.x has Server Side Request Forgery in the filepicker.

moodle/moodle moodle Web / CMS Ubuntu Packagist

Jan 22, 2018
Medium 6.1

CVE-2015-9251 Public exploit EPSS 30%

Cross-Site Scripting (XSS) in jquery

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

ruby jquery-rails org.webjars.npm:jquery jQuery Ubuntu Alpine npm Maven NuGet RubyGems

Jan 18, 2018
Medium 6.1

CVE-2012-6708 Public exploit

Cross-Site Scripting in jquery

jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<…

ruby jquery-rails org.webjars.npm:jquery jQuery Ubuntu Alpine npm Maven NuGet RubyGems

Jan 18, 2018
Medium 5.6

CVE-2017-5715 Public exploit EPSS 73%

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

Intel Microprocessors with Speculative Execution linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018
Medium 5.6

CVE-2017-5753 Public exploit EPSS 94%

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…

Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018
Medium 5.6

CVE-2017-5754 Public exploit EPSS 67%

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018