# CVEs published 2018-02-03

9 CVEs were published on February 3, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-6596](https://cve.now/CVE-2018-6596.md): webhooks/base.py in Anymail (aka django-anymail) before 1.2.1 is prone to a timing attack vulnerability on the WEBHOOK\_AUTHORIZATION secret, (no CVSS, django-anymail)
- [CVE-2018-6593](https://cve.now/CVE-2018-6593.md): An issue was discovered in MalwareFox AntiMalware 2.74.0.150. (no CVSS)
- [CVE-2017-18123](https://cve.now/CVE-2017-18123.md): The call parameter of /lib/exe/ajax.php in DokuWiki through 2017-02-19e does not properly encode user input, which leads to a reflected file (no CVSS)
- [CVE-2018-6594](https://cve.now/CVE-2018-6594.md): lib/Crypto/PublicKey/ElGamal.py in PyCrypto through 2.6.1 generates weak ElGamal key parameters, which allows attackers to obtain sensitive (no CVSS, pycrypto)
- [CVE-2018-1184](https://cve.now/CVE-2018-1184.md): An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverP (no CVSS, EMC RecoverPoint for Virtual Machines versions prior to 5.1…)
- [CVE-2018-1185](https://cve.now/CVE-2018-1185.md): An issue was discovered in EMC RecoverPoint for Virtual Machines versions prior to 5.1.1, EMC RecoverPoint version 5.1.0.0, and EMC RecoverP (no CVSS, EMC RecoverPoint for Virtual Machines versions prior to 5.1…)
- [CVE-2009-5144](https://cve.now/CVE-2009-5144.md): mod-gnutls does not validate client certificates when "GnuTLSClientVerify require" is set in a directory context, which allows remote attack (no CVSS)
- [CVE-2015-2186](https://cve.now/CVE-2015-2186.md): The Ansible edxapp role in the Configuration Repo in edX allows remote websites to spoof edX accounts by leveraging use of the string litera (no CVSS)
- [CVE-2017-17108](https://cve.now/CVE-2017-17108.md): Path traversal vulnerability in the administrative panel in KonaKart eCommerce Platform version 8.7 and earlier could allow an attacker to d (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-02-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.