Skip to content
OpenAdvisories

Archive

1 February 2018

Vulnerabilities first published on this day (UTC), newest first.

← January 2018 2018 / February /1 March 2018 →
  1. 128
  2. 266
  3. 39
  4. 46
  5. 540
  6. 664
  7. 761
  8. 874
  9. 977
  10. 10 
  11. 113
  12. 1254
  13. 1329
  14. 1438
  15. 15340
  16. 1622
  17. 1731
  18. 1811
  19. 1943
  20. 2028
  21. 2147
  22. 2248
  23. 2359
  24. 2411
  25. 256
  26. 2630
  27. 2777
  28. 2828
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2017-2296

    In Puppet Enterprise 2017.1.x and 2017.2.1, using specially formatted strings with certain formatting characters as Cla…

    Puppet Puppet Enterprise
  • Unscored —
    CVE-2017-2293

    Versions of Puppet Enterprise prior to 2016.4.5 or 2017.2.1 shipped with an MCollective configuration that allowed the …

    Puppet Puppet Enterprise
  • Unscored —
    CVE-2017-2297

    Puppet Enterprise versions prior to 2016.4.5 and 2017.2.1 did not correctly authenticate users before returning labeled…

    Puppet Puppet Enterprise
  • Unscored —
    CVE-2017-3160

    After the Android platform is added to Cordova the first time, or after a project is created using the build scripts, t…

    Apache Software Foundation Apache Cordova Android Android
  • High 8.8
    CVE-2018-1192

    Cloud Foundry UAA SessionID present in Audit Event Logs

    In Cloud Foundry Foundation cf-release versions prior to v285; cf-deployment versions prior to v1.7; UAA 4.5.x versions prior to 4.5.5, 4.8.x versions prior to 4.8.3, and 4.7.x versions prior to 4.7.4; and UAA-release 45.7.x versions prior to 45.7, 52.7.x ver…

    org.cloudfoundry.identity:cloudfoundry-identity-server Maven
  • Unscored —
    CVE-2015-2203

    Evergreen 2.5.9, 2.6.7, and 2.7.4 allows remote authenticated users with STAFF_LOGIN permission to obtain sensitive set…

  • Unscored —
    CVE-2015-2204

    Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to bypass an intended access…

  • Unscored —
    CVE-2011-4068

    The check_password function in html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to bypass authe…

  • Unscored —
    CVE-2011-4069

    html/admin/login.php in PacketFence before 3.0.2 allows remote attackers to conduct LDAP injection attacks and conseque…

  • Unscored —
    CVE-2013-7435

    The open-ils.pcrud endpoint in Evergreen before 2.5.9, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attacke…

  • Unscored —
    CVE-2014-3005

    XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1…

    zabbix zabbix Debian Ubuntu
  • Unscored —
    CVE-2014-3519

    The open_by_handle_at function in vzkernel before 042stab090.5 in the OpenVZ modification for the Linux kernel 2.6.32, …

  • Unscored —
    CVE-2014-3752

    The MiniIcpt.sys driver in G Data TotalProtection 2014 24.0.2.1 and earlier allows local users with administrator right…

  • Unscored —
    CVE-2014-3244

    XML external entity (XXE) vulnerability in the RSSDashlet dashlet in SugarCRM before 6.5.17 allows remote attackers to …

  • Unscored —
    CVE-2014-9502

    Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified sub modules in the Open Atrium module 7.x-2.x…

  • Unscored —
    CVE-2014-9503

    The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenticated use…

  • Unscored —
    CVE-2014-9504

    The OG Subgroups module, when used with the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal, allows remote attack…

  • Unscored —
    CVE-2018-0510

    Buffer overflow in epg search result viewer (kkcald) 0.7.19 and earlier allows remote attackers to perform unintended o…

    kkcal epg search result viewer(kkcald)
  • Unscored —
    CVE-2018-0508

    Cross-site scripting vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to inject…

    kkcal epg search result viewer(kkcald)
  • Unscored —
    CVE-2018-0509

    Cross-site request forgery (CSRF) vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attac…

    kkcal epg search result viewer(kkcald)
  • Unscored —
    CVE-2018-0511

    Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web sc…

    Jordy Meow WP Retina 2x
  • Unscored —
    CVE-2018-6186

    Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attac…

  • Unscored —
    CVE-2018-6485

    An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc o…

    glibc eglibc glibc Debian Ubuntu
  • Unscored —
    CVE-2018-6470

    Nibbleblog 4.0.5 on macOS defaults to having .DS_Store in each directory, causing DS_Store information to leak.

  • Unscored —
    CVE-2018-6484

    In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/z…

    zziplib zziplib Debian Ubuntu
  • Unscored —
    CVE-2017-16861

    It was possible for double OGNL evaluation in certain redirect action and in WebWork URL and Anchor tags in JSP files t…

    Atlassian Fisheye and Crucible
  • Unscored —
    CVE-2017-1000408 Public exploit

    A memory leak in glibc 2.1.1 (released on May 24, 1999) can be reached and amplified through the LD_HWCAP_MASK environm…

    glibc eglibc glibc Debian Ubuntu
  • Unscored —
    CVE-2017-1000409 Public exploit

    A buffer overflow in glibc 2.5 (released on September 29, 2006) and can be triggered through the LD_LIBRARY_PATH enviro…

    glibc eglibc glibc Debian Ubuntu