# CVEs published 2018-02-03

9 CVEs were published on February 3, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-6596](https://cve.now/CVE-2018-6596.md): webhooks/base.py in Anymail (aka django-anymail) before 1.2.1 is prone to a timing attack vulnerability on the WEBHOOK\_AUTHORIZATION… (no CVSS, django-anymail)
- [CVE-2018-6593](https://cve.now/CVE-2018-6593.md): An issue was discovered in MalwareFox AntiMalware 2.74.0.150. (no CVSS)
- [CVE-2017-18123](https://cve.now/CVE-2017-18123.md): The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected… (no CVSS)
- [CVE-2018-6594](https://cve.now/CVE-2018-6594.md): lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain… (no CVSS, pycrypto)
- [CVE-2018-1184](https://cve.now/CVE-2018-1184.md): An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC… (no CVSS, EMC RecoverPoint for Virtual Machines versions prior to 5.1…)
- [CVE-2018-1185](https://cve.now/CVE-2018-1185.md): An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC… (no CVSS, EMC RecoverPoint for Virtual Machines versions prior to 5.1…)
- [CVE-2009-5144](https://cve.now/CVE-2009-5144.md): mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote… (no CVSS)
- [CVE-2015-2186](https://cve.now/CVE-2015-2186.md): The Ansible edxapp role in the Configuration Repo in edX allows remote websites to spoof edX accounts by leveraging use of the string… (no CVSS)
- [CVE-2017-17108](https://cve.now/CVE-2017-17108.md): Path traversal vulnerability in the administrative panel in KonaKart eCommerce Platform version 8.7 and earlier could allow an attacker to… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2018-02-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.