Skip to content
OpenAdvisories

Archive

23 January 2017

Vulnerabilities first published on this day (UTC), newest first.

← December 2016 2017 / January /23 February 2017 →
  1. 11
  2. 24
  3. 35
  4. 419
  5. 514
  6. 653
  7. 7 
  8. 8 
  9. 95
  10. 1016
  11. 1152
  12. 12159
  13. 1341
  14. 1410
  15. 1510
  16. 162
  17. 177
  18. 1861
  19. 1939
  20. 2025
  21. 211
  22. 22 
  23. 2397
  24. 2410
  25. 2510
  26. 2631
  27. 27261
  28. 2845
  29. 29 
  30. 3057
  31. 3148
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2015-8857

    Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js

    The uglify-js package before 2.4.24 for Node.js does not properly account for non-boolean values when rewriting boolean expressions, which might allow attackers to bypass security mechanisms or possibly have unspecified other impact by leveraging improperly r…

    uglifyjs uglifyjs uglify-js uglifier Debian Ubuntu npm RubyGems
  • Critical 9.8
    CVE-2016-7036

    python-jose failure to use a constant time comparison for HMAC keys

    python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.

    python-jose PyPI
  • Critical 9.1
    CVE-2016-6582

    Doorkeeper is vulnerable to replay attacks

    The Doorkeeper gem before 4.2.0 for Ruby might allow remote attackers to conduct replay attacks or revoke arbitrary tokens by leveraging failure to implement the OAuth 2.0 Token Revocation specification.

    doorkeeper ruby-doorkeeper ruby-doorkeeper Debian Ubuntu RubyGems