CVEs published January 20, 2018
5 CVEs were published on January 20, 2018: 0 critical, 1 high.
- Published
- 5
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 4
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- jdennis keycloak-httpd-client-install · keycloak-httpd-clie…
- 2
- Micro Focus NetIQ Access Manager
- 1
- Red Hat spice-vdagent
- 1
- Talos Tinysvcmdns
- 1
High 1
Medium, low and unrated 4
- CVE-2017-14803In NetIQ Access Manager 4.3 and 4.4, a bug exists in Identity Server when accessing a basic SSO connector and downloading the BasicSSO conneMicro Focus NetIQ Access Manager
- CVE-2017-15108spice-vdagent up to and including 0.17.0 does not properly escape save directory before passing to shell, allowing local attacker with accesRed Hat spice-vdagent
- CVE-2017-15111keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via syjdennis keycloak-httpd-client-install · keycloak-httpd-clie…
- CVE-2017-15112keycloak-httpd-client-install versions before 0.8 allow users to insecurely pass password through command line, leaking it via command histojdennis keycloak-httpd-client-install · keycloak-httpd-clie…