Skip to content
OpenAdvisories

Archive

17 December 2017

Vulnerabilities first published on this day (UTC), newest first.

4 results · Feed

  • Medium 5.9

    net-ldap Improper Certificate Validation vulnerability

    The Net::LDAP (aka net-ldap) gem before 0.16.0 for Ruby has Missing SSL Certificate Validation.

  • Unscored —

    Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDA…

  • Unscored —

    GitLab 9.4.x before 9.4.2 does not support LDAP SSL certificate verification, but a verify_certificates LDAP option was…

  • Unscored —

    Cross - site scripting (XSS) vulnerability in UrBackup Server before 2.1.20 allows remote attackers to inject arbitrary…