Skip to content
OpenAdvisories

Archive

19 February 2018

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-7251 Public exploit Scanner template EPSS 72%

    Anchor CMS Logs Credentials

    An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error (such as "Too many connections") has occurred.

  • Critical 9.8

    A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request e…