Skip to content
OpenAdvisories

Archive

21 May 2018

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Medium 4.2

    Improper Neutralization of Input During Web Page Generation in Jenkins

    jenkins before versions 2.44, 2.32.2 is vulnerable to a persisted cross-site scripting vulnerability in console notes (SECURITY-382). Jenkins allows plugins to annotate build logs, adding new content or changing the presentation of existing content while the …

  • Medium 5.9

    kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed…

  • Medium 5.5

    There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files

    This vulnerability in Apache Solr 6.0.0 to 6.6.3, 7.0.0 to 7.3.0 relates to an XML external entity expansion (XXE) in Solr config files (solrconfig.xml, schema.xml, managed-schema). In addition, Xinclude functionality provided in these config files is also af…

  • Medium 5.4

    Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow

    In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the injection of arbitrary HTTP headers, and also response splitting, due to insufficient sanitization and vali…