Skip to content
OpenAdvisories

Archive

14 March 2018

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-1000120 EPSS 12%

    curl FTP path confusion leads to NIL byte out of bounds write

    A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.

  • Critical 9.1

    Mercurial Incorrect Access Control vulnerability

    Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via network connectivity. This vulnerability appears to have bee…

  • Critical 9.8
    CVE-2018-8097 Public exploit

    Eve allows execution of arbitrary code

    io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter.