Skip to content
OpenAdvisories

Archive

3 February 2018

Vulnerabilities first published on this day (UTC), newest first.

← January 2018 2018 / February /3 March 2018 →
  1. 128
  2. 266
  3. 39
  4. 46
  5. 540
  6. 664
  7. 761
  8. 874
  9. 977
  10. 10 
  11. 113
  12. 1254
  13. 1329
  14. 1438
  15. 15340
  16. 1622
  17. 1731
  18. 1811
  19. 1943
  20. 2028
  21. 2147
  22. 2248
  23. 2359
  24. 2411
  25. 256
  26. 2630
  27. 2777
  28. 2828
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Critical 9.1
    CVE-2018-6596

    Django-Anymail prone to a timing attack

    webhooks/base.py in Anymail (aka django-anymail) before 1.2.1 is prone to a timing attack vulnerability on the WEBHOOK_AUTHORIZATION secret, which allows remote attackers to post arbitrary e-mail tracking events.

    django-anymail django-anymail Debian PyPI
  • Unscored —
    CVE-2018-6593 Public exploit

    An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows…

  • High 7.5
    CVE-2018-6594

    Pycrypto generates weak key parameters

    lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive information by reading ciphertext data (i.e., it does not have semantic security in face of a ciphertext-only attack). …

    pycrypto pycryptodome pycryptodome python-crypto Debian Ubuntu PyPI
  • Unscored —
    CVE-2017-18123

    The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which lead…

    dokuwiki dokuwiki Debian Ubuntu
  • Unscored —
    CVE-2018-1184

    An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.…

  • Unscored —
    CVE-2018-1185 Public exploit

    An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.…

  • Unscored —
    CVE-2015-2186

    The Ansible edxapp role in the Configuration Repo in edX allows remote websites to spoof edX accounts by leveraging use…

  • Unscored —
    CVE-2009-5144

    mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which…

  • Unscored —
    CVE-2017-17108

    Path traversal vulnerability in the administrative panel in KonaKart eCommerce Platform version 8.7 and earlier could a…