Skip to content
OpenAdvisories

Archive

8 November 2017

Vulnerabilities first published on this day (UTC), newest first.

← October 2017 2017 / November /8 December 2017 →
  1. 133
  2. 223
  3. 333
  4. 417
  5. 54
  6. 629
  7. 744
  8. 821
  9. 933
  10. 1013
  11. 111
  12. 126
  13. 1397
  14. 1422
  15. 1591
  16. 16124
  17. 17100
  18. 184
  19. 191
  20. 2026
  21. 2119
  22. 22162
  23. 237
  24. 247
  25. 255
  26. 261
  27. 2755
  28. 2816
  29. 2916
  30. 3058
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2015-3933 Public exploit

    MetalGenix GeniXCMS vulnerable to SQL Injection

    Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the (1) email parameter or (2) userid parameter to register.php.

    genix/cms Packagist
  • Critical 9.8
    CVE-2017-16615

    Unsafe deserialization in MLAlchemy

    An exploitable vulnerability exists in the YAML parsing functionality in the parse_yaml_query method in parser.py in MLAlchemy before 0.2.2. When processing YAML-Based queries for data, a YAML parser can execute arbitrary Python commands resulting in command …

    mlalchemy PyPI
  • Critical 9.8
    CVE-2017-16618

    Unsafe deserialization in owlmixin

    An exploitable vulnerability exists in the YAML loading functionality of util.py in OwlMixin before 2.0.0a12. A "Load YAML" string or file (aka load_yaml or load_yamlf) can execute arbitrary Python commands resulting in command execution because load is used …

    owlmixin PyPI
  • Critical 9.8
    CVE-2017-16616

    Unsafe pyyaml load usage in PyAnyAPI

    An exploitable vulnerability exists in the YAML parsing functionality in the YAMLParser method in Interfaces.py in PyAnyAPI before 0.6.1. A YAML parser can execute arbitrary Python commands resulting in command execution because load is used where safe_load s…

    pyanyapi PyPI