Skip to content
OpenAdvisories

Archive

27 January 2018

Vulnerabilities first published on this day (UTC), newest first.

← December 2017 2018 / January /27 February 2018 →
  1. 111
  2. 240
  3. 357
  4. 466
  5. 527
  6. 64
  7. 71
  8. 859
  9. 933
  10. 10105
  11. 1149
  12. 12118
  13. 1326
  14. 1420
  15. 154
  16. 1645
  17. 176
  18. 18217
  19. 1932
  20. 205
  21. 217
  22. 2227
  23. 2364
  24. 2452
  25. 2539
  26. 2655
  27. 277
  28. 281
  29. 2936
  30. 3023
  31. 3139
All Critical High Medium Low Exploited only Public exploit

7 results · Feed

  • Unscored —
    CVE-2018-6359

    The decompileIF function (util/decompile.c) in libming through 0.4.8 is vulnerable to a use-after-free, which may allow…

    ming Ubuntu
  • Unscored —
    CVE-2018-6358

    The printDefineFont2 function (util/listfdb.c) in libming through 0.4.8 is vulnerable to a heap-based buffer overflow, …

    ming Ubuntu
  • Unscored —
    CVE-2018-6357

    The acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for Word…

  • Unscored —
    CVE-2018-6353

    The Python console in Electrum through 2.9.4 and 3.x through 3.0.5 supports arbitrary Python code without considering (…

    electrum Debian
  • Unscored —
    CVE-2018-6354

    templates/forms/thanks.html in Formspree before 2018-01-23 allows XSS related to the _next parameter.

  • Unscored —
    CVE-2018-6352

    In PoDoFo 0.9.5, there is an Excessive Iteration in the PdfParser::ReadObjectsInternal function of base/PdfParser.cpp. …

    libpodofo libpodofo podofo Debian Ubuntu Alpine
  • High 7.5
    CVE-2017-18077

    ReDoS in brace-expansion

    index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing many comma characters.

    brace-expansion node-brace-expansion Debian npm