Skip to content
OpenAdvisories

Archive

28 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /28 February 2019 →
  1. 14
  2. 229
  3. 358
  4. 410
  5. 5 
  6. 6 
  7. 78
  8. 871
  9. 9196
  10. 1048
  11. 1158
  12. 124
  13. 139
  14. 1414
  15. 1560
  16. 16212
  17. 1712
  18. 18123
  19. 193
  20. 20 
  21. 214
  22. 2227
  23. 2330
  24. 24107
  25. 2513
  26. 263
  27. 272
  28. 2828
  29. 2934
  30. 3018
  31. 3129
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.5
    CVE-2018-10910

    A bug in Bluez may allow for the Bluetooth Discoverable state being set to on when no Bluetooth agent is registered wit…

    The Bluez Project bluez bluez bluez Debian Ubuntu
  • Medium 5.5
    CVE-2018-16889

    Ceph does not properly sanitize encryption keys in debug logging for v4 auth. This results in the leaking of encryption…

    The Ceph Project ceph ceph ceph Debian Ubuntu
  • Medium 5.9
    CVE-2018-20744

    github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error

    The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.

    github.com/gofiber/fiber/v2 github.com/rs/cors Go
  • Medium 5.9
    CVE-2018-20745

    Yii Incorrectly Implements CORS

    Yii 2.x through 2.0.15.1 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.

    yiisoft/yii2 Packagist