Skip to content
OpenAdvisories

Archive

19 June 2018

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Medium 5.5

    The libfsntfs_attribute_read_from_mft function in libfsntfs_attribute.c in libfsntfs through 2018-04-20 allows remote a…

  • Medium 5.5

    The libfsntfs_reparse_point_values_read_data function in libfsntfs_reparse_point_values.c in libfsntfs through 2018-04-…

  • Medium 6.5

    Auth0 angular-jwt misinterprets allowlist as regex

    Auth0 angular-jwt before 0.1.10 treats whiteListedDomains entries as regular expressions, which allows remote attackers with knowledge of the jwtInterceptorProvider.whiteListedDomains setting to bypass the domain whitelist filter via a crafted domain.

  • Medium 5.0

    ovirt-ansible-roles before version 1.0.6 has a vulnerability due to a missing no_log directive, resulting in the 'Add o…

  • Medium 6.5

    python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in the di…

  • Medium 5.3

    The web console login form in ovirt-engine before version 4.2.3 returned different errors for non-existent users and in…