Skip to content
OpenAdvisories

Archive

26 February 2018

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.5
    CVE-2018-7490 Public exploit Scanner template EPSS 69%

    uWSGI Directory Traversal vulnerability

    uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.

  • High 7.5

    Apache Geode configuration request authorization vulnerability

    When an Apache Geode cluster before v1.4.0 is operating in secure mode, the Geode configuration service does not properly authorize configuration requests. This allows an unprivileged user who gains access to the Geode locator to extract configuration data an…