Archive

28 February 2018

Vulnerabilities first published on this day (UTC), newest first.

← January 2018 2018 / February /28 March 2018 →

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

Unscored —

CVE-2015-4117 Public exploit EPSS 11%

Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metachara…

Feb 28, 2018
Unscored —

CVE-2015-5079 Public exploit EPSS 17%

Directory traversal vulnerability in widgets/logs.php in BlackCat CMS before 1.1.2 allows remote attackers to read arbi…

Feb 28, 2018
Unscored —

CVE-2018-6947 Public exploit

An uninitialised stack variable in the nxfuse component that is part of the Open Source DokanFS library shipped with No…

Feb 28, 2018
Unscored —

CVE-2015-3898 Public exploit

Multiple open redirect vulnerabilities in Bonita BPM Portal before 6.5.3 allow remote attackers to redirect users to ar…

Feb 28, 2018
Medium 5.9

CVE-2018-1304 Public exploit EPSS 17%

Apache Tomcat unauthorized access vulnerability

The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 when used as part of a security constraint definition. This …

Apache Software Foundation Apache Tomcat tomcat8 tomcat7 Ubuntu Maven

Feb 28, 2018
Unscored —

CVE-2018-7264 Public exploit EPSS 12%

The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out…

Feb 28, 2018
Unscored —

CVE-2018-7477 Public exploit

SQL Injection exists in PHP Scripts Mall School Management Script 3.0.4 via the Username and Password fields to parents…

Feb 28, 2018