Archive

27 March 2017

Vulnerabilities first published on this day (UTC), newest first.

← February 2017 2017 / March /27 April 2017 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2016-9243

Improper input validation in cryptography

HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.

cryptography python-cryptography python-cryptography Debian Ubuntu PyPI

Mar 27, 2017
High 8.8

CVE-2017-6068

Subrion CMS vulnerable to CSRF in admin/blocks/add

Subrion CMS 4.0.5 has CSRF in admin/blocks/add/. The attacker can create any block, and can optionally insert XSS via the content parameter.

intelliants/subrion Packagist

Mar 27, 2017