Skip to content
OpenAdvisories

Archive

7 March 2018

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8

    Bleach URI Scheme Restriction Bypass

    An issue was discovered in Bleach 2.1.x before 2.1.3. Attributes that have URI values weren't properly sanitized if the values contained character entities. Using character entities, it was possible to construct a URI value with a scheme that was not allowed …

  • Critical 9.8
    CVE-2017-15367 Public exploit EPSS 23%

    Bacula-web SQL Injection Vulnerabilities

    Bacula-web before 8.0.0-rc2 is affected by multiple SQL Injection vulnerabilities that could allow an attacker to access the Bacula database and, depending on configuration, escalate privileges on the server.