Skip to content
OpenAdvisories

Archive

1 February 2017

Vulnerabilities first published on this day (UTC), newest first.

← January 2017 2017 / February /1 March 2017 →
  1. 1143
  2. 215
  3. 344
  4. 43
  5. 53
  6. 632
  7. 734
  8. 886
  9. 952
  10. 109
  11. 11 
  12. 126
  13. 13124
  14. 144
  15. 1592
  16. 1628
  17. 1759
  18. 183
  19. 19 
  20. 20154
  21. 2121
  22. 2241
  23. 2311
  24. 2434
  25. 25 
  26. 261
  27. 2730
  28. 2812
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2017-5630 Public exploit EPSS 13%

    PEAR core file overwrite vulnerability

    PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite.

    php5 php-pear php-pear pear/pear Debian Ubuntu Packagist
  • High 7.5
    CVE-2016-10173

    archive-tar-minitar and minitar vulnerable to Path Traversal

    Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. (dot dot) in a TAR archive entry.

    ruby-minitar minitar ruby-minitar ruby-archive-tar-minitar Debian Ubuntu RubyGems