Skip to content
OpenAdvisories

Archive

3 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /3 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2017-1000477

    XXE Vulnerability in XMLBundle 0.1.7

    XMLBundle version 0.1.7 is vulnerable to XXE attacks which can result in denial of service attacks.

    desperado/xml-bundle Packagist
  • High 8.1
    CVE-2017-1000489

    Disabled users able to log in with third party SSO plugin

    Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address

    mautic/core Packagist
  • High 7.8
    CVE-2017-1000498

    Android SVG vulnerable to XML External Entity (XXE)

    AndroidSVG version 1.2.2 is vulnerable to XXE attacks in the SVG parsing component resulting in denial of service and possibly remote code execution

    com.caverock:androidsvg Maven
  • High 8.8
    CVE-2017-1000499 Public exploit

    phpMyAdmin CSRF Vulnerability

    phpMyAdmin versions 4.7.x (prior to 4.7.6.1/4.7.7) are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc.

    phpmyadmin/phpmyadmin Packagist