Skip to content
OpenAdvisories

Archive

6 February 2018

Vulnerabilities first published on this day (UTC), newest first.

← January 2018 2018 / February /6 March 2018 →
  1. 128
  2. 266
  3. 39
  4. 46
  5. 540
  6. 664
  7. 761
  8. 874
  9. 977
  10. 10 
  11. 113
  12. 1254
  13. 1329
  14. 1438
  15. 15340
  16. 1622
  17. 1731
  18. 1811
  19. 1943
  20. 2028
  21. 2147
  22. 2248
  23. 2359
  24. 2411
  25. 256
  26. 2630
  27. 2777
  28. 2828
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.8
    CVE-2018-4878 Exploited · Ransomware Public exploit EPSS 90%

    A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to…

    flashplugin-nonfree Ubuntu
    KEV Nov 3, 2021
  • Unscored —
    CVE-2016-3957 Public exploit

    The secure_load function in gluon/utils.py in web2py before 2.14.2 uses pickle.loads to deserialize session information…

    web2py Ubuntu
  • Unscored —
    CVE-2018-6389 Public exploit EPSS 73%

    In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the…

    wordpress wordpress Debian Ubuntu
  • Critical 9.8
    CVE-2017-7525 Public exploit EPSS 38%

    jackson-databind is vulnerable to a deserialization flaw

    A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.

    FasterXML jackson-databind jackson-databind com.fasterxml.jackson.core:jackson-databind Debian Ubuntu Maven