Archive
31 March 2018
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Unscored —CVE-2018-8908 Public exploit
An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from C…
-
Medium 5.3CVE-2018-9159 Public exploit
Moderate severity vulnerability that affects com.sparkjava:spark-core
In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences. NOTE: this product is unrelated to Ignite Realtime Spark.
-
Critical 9.8
SiCKRAGE Discloses Plaintext Credentials
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.