Skip to content
OpenAdvisories

Archive

19 February 2018

Vulnerabilities first published on this day (UTC), newest first.

← January 2018 2018 / February /19 March 2018 →
  1. 128
  2. 266
  3. 39
  4. 46
  5. 540
  6. 664
  7. 761
  8. 874
  9. 977
  10. 10 
  11. 113
  12. 1254
  13. 1329
  14. 1438
  15. 15340
  16. 1622
  17. 1731
  18. 1811
  19. 1943
  20. 2028
  21. 2147
  22. 2248
  23. 2359
  24. 2411
  25. 256
  26. 2630
  27. 2777
  28. 2828
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2016-8750

    Moderate severity vulnerability that affects org.apache.karaf:apache-karaf

    Apache Karaf prior to 4.0.8 used the LDAPLoginModule to authenticate users to a directory via LDAP. However, it did not encoding usernames properly and hence was vulnerable to LDAP injection attacks leading to a denial of service.

    Apache Software Foundation Apache Karaf org.apache.karaf:apache-karaf Maven
  • Medium 5.3
    CVE-2018-6591

    Converse.js Exposure of Sensitive Information

    Converse.js and Inverse.js through 3.3 allow remote attackers to obtain sensitive information because it is too difficult to determine whether safe publication of private data was configured or even intended. For example, users might have an expectation that …

    converse.js jcbrand/converse.js npm Packagist
  • Medium 6.5
    CVE-2017-15712

    Path Traversal in Apache Oozie

    Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process. The malicious user can construct a workflow XML file containing XML directives and configuration that reference sensitiv…

    Apache Software Foundation Apache Oozie org.apache.oozie:oozie-core Maven
  • Medium 6.5
    CVE-2018-5381 EPSS 30%

    The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in…

    quagga bgpd quagga Ubuntu
  • Medium 4.3
    CVE-2018-5380 EPSS 15%

    The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for …

    quagga bgpd quagga Ubuntu