CVEs published February 3, 2018
9 CVEs were published on February 3, 2018: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 1
Most affected products
- EMC RecoverPoint for Virtual Machines versions prior to 5.1…
- 2
- django-anymail
- 1
- pycrypto
- 1
Medium, low and unrated 9
- CVE-2018-6596webhooks/base.py in Anymail (aka django-anymail) before 1.2.1 is prone to a timing attack vulnerability on the WEBHOOK_AUTHORIZATION secret,django-anymail
- CVE-2018-6593An issue was discovered in MalwareFox AntiMalware 2.74.0.150.
- CVE-2017-18123The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file
- CVE-2018-6594lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive pycrypto
- CVE-2018-1184An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPEMC RecoverPoint for Virtual Machines versions prior to 5.1…
- CVE-2018-1185An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverPEMC RecoverPoint for Virtual Machines versions prior to 5.1…
- CVE-2009-5144mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attack
- CVE-2015-2186The Ansible edxapp role in the Configuration Repo in edX allows remote websites to spoof edX accounts by leveraging use of the string litera
- CVE-2017-17108Path traversal vulnerability in the administrative panel in KonaKart eCommerce Platform version 8.7 and earlier could allow an attacker to d