Skip to content
OpenAdvisories

Archive

6 March 2018

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2018-7739 Public exploit EPSS 53%

    antsle antman before 0.9.1a allows remote attackers to bypass authentication via invalid characters in the username and…

  • Unscored —
    CVE-2018-7737 Public exploit

    In Z-BlogPHP 1.5.1.1740, there is Web Site physical path leakage, as demonstrated by admin_footer.php or admin_footer.p…

  • Unscored —
    CVE-2018-7736 Public exploit

    In Z-BlogPHP 1.5.1.1740, cmd.php has XSS via the ZC_BLOG_SUBNAME parameter or ZC_UPLOAD_FILETYPE parameter. NOTE: the s…

  • Unscored —
    CVE-2015-5377 Public exploit EPSS 14%

    Elasticsearch before 1.6.1 allows remote attackers to execute arbitrary code via unspecified vectors involving the tran…

  • Unscored —
    CVE-2018-7182 Public exploit EPSS 29%

    The ctl_getitem method in ntpd in ntp-4.2.8p6 before 4.2.8p11 allows remote attackers to cause a denial of service (out…