Skip to content
OpenAdvisories

Archive

27 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /27 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2018-1327

    Apache Struts REST Plugin can potentially allow a DoS attack

    The Apache Struts REST Plugin is using XStream library which is vulnerable and allow perform a DoS attack when using a malicious request with specially crafted XML payload. Upgrade to the Apache Struts version 2.5.16 and switch to an optional Jackson XML hand…

    Apache Software Foundation Apache Struts org.apache.struts:struts2-rest-plugin Maven
  • High 8.0
    CVE-2018-8718 Public exploit

    Cross-Site Request Forgery in Jenkins Mailer Plugin

    Cross-site request forgery (CSRF) vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /descriptorByName/hudson.tasks.Mailer/sendTestMail request.

    org.jenkins-ci.plugins:mailer Maven