Skip to content
OpenAdvisories

Archive

February 2018

Vulnerabilities first published in this month (UTC), newest first.

7 results · Clear filters · Feed

  • High 7.5
    CVE-2018-7490 Public exploit EPSS 69%

    uWSGI Directory Traversal vulnerability

    uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.

  • High 7.5
    CVE-2018-0834 Public exploit EPSS 55%

    ChakraCore RCE Vulnerability

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  • High 7.5
    CVE-2018-0860 Public exploit EPSS 68%

    ChakraCore RCE Vulnerability

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  • High 7.5
    CVE-2018-0838 Public exploit EPSS 65%

    ChakraCore RCE Vulnerability

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  • High 7.5
    CVE-2018-0837 Public exploit EPSS 65%

    ChakraCore RCE Vulnerability

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  • High 7.5
    CVE-2018-0835 Public exploit EPSS 65%

    ChakraCore RCE Vulnerability

    Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

  • High 7.8
    CVE-2018-4878 Exploited · Ransomware Public exploit EPSS 90%

    A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to…

    KEV Nov 3, 2021