Skip to content
OpenAdvisories

Archive

19 December 2018

Vulnerabilities first published on this day (UTC), newest first.

← November 2018 2018 / December /19 January 2019 →
  1. 18
  2. 21
  3. 354
  4. 480
  5. 530
  6. 675
  7. 757
  8. 88
  9. 93
  10. 1032
  11. 1153
  12. 1281
  13. 1356
  14. 1421
  15. 152
  16. 16 
  17. 1778
  18. 1819
  19. 1931
  20. 20136
  21. 2130
  22. 2214
  23. 2340
  24. 2441
  25. 2526
  26. 2633
  27. 2711
  28. 2882
  29. 29 
  30. 3029
  31. 3134
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2018-11799

    Moderate severity vulnerability that affects org.apache.oozie:oozie-core

    Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 5.0.0 to impersonate other users. The malicious user can construct an XML that results workflows running in other user's name.

    Apache Software Foundation Apache Oozie org.apache.oozie:oozie-core Maven
  • Medium 6.1
    CVE-2018-17193

    Cross site scripting in org.apache.nifi:nifi

    The message-page.jsp error page used the value of the HTTP request header X-ProxyContextPath without sanitization, resulting in a reflected XSS attack. Mitigation: The fix to correctly parse and sanitize the request attribute value was applied on the Apache N…

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi Maven
  • Medium 6.5
    CVE-2018-17192

    Improper Restriction of Rendered UI Layers or Frames in Apache nifif

    The X-Frame-Options headers were applied inconsistently on some HTTP responses, resulting in duplicate or missing security headers. Some browsers would interpret these results incorrectly, allowing clickjacking attacks. Mitigation: The fix to consistently app…

    Apache Software Foundation Apache NiFi org.apache.nifi:nifi Maven