Skip to content
OpenAdvisories

Archive

26 February 2018

Vulnerabilities first published on this day (UTC), newest first.

← January 2018 2018 / February /26 March 2018 →
  1. 128
  2. 266
  3. 39
  4. 46
  5. 540
  6. 664
  7. 761
  8. 874
  9. 977
  10. 10 
  11. 113
  12. 1254
  13. 1329
  14. 1438
  15. 15340
  16. 1622
  17. 1731
  18. 1811
  19. 1943
  20. 2028
  21. 2147
  22. 2248
  23. 2359
  24. 2411
  25. 256
  26. 2630
  27. 2777
  28. 2828
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2018-7490 Public exploit Scanner template EPSS 69%

    uWSGI Directory Traversal vulnerability

    uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.

    uwsgi uwsgi uwsgi uwsgi Debian Ubuntu Alpine PyPI
  • Unscored —
    CVE-2018-7250 Public exploit

    An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 befo…

  • Unscored —
    CVE-2018-7249 Public exploit

    An issue was discovered in secdrv.sys as shipped in Microsoft Windows Vista, Windows 7, Windows 8, and Windows 8.1 befo…

  • Unscored —
    CVE-2018-7448 Public exploit EPSS 13%

    Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remot…

  • Unscored —
    CVE-2017-18195 Public exploit EPSS 11%

    An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0. An unauthenticated user can enu…

  • Critical 9.8
    CVE-2018-7489 Public exploit EPSS 20%

    FasterXML jackson-databind allows unauthenticated remote code execution

    FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JS…

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven