Skip to content
OpenAdvisories

Archive

6 April 2018

Vulnerabilities first published on this day (UTC), newest first.

← March 2018 2018 / April /6 May 2018 →
  1. 18
  2. 225
  3. 3170
  4. 4163
  5. 557
  6. 614
  7. 710
  8. 85
  9. 914
  10. 1050
  11. 1188
  12. 12112
  13. 1346
  14. 148
  15. 157
  16. 1641
  17. 1731
  18. 18282
  19. 19200
  20. 2036
  21. 2110
  22. 2210
  23. 2327
  24. 2497
  25. 2547
  26. 2636
  27. 2729
  28. 283
  29. 2915
  30. 3029
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Unscored —
    CVE-2018-9838

    The caml_ba_deserialize function in byterun/bigarray.c in the standard library in OCaml 4.06.0 has an integer overflow …

    ocaml ocaml Debian Ubuntu
  • Unscored —
    CVE-2013-6876

    The (1) pty_init_terminal and (2) pipe_init_terminal functions in main.c in s3dvt 0.2.2 and earlier allows local users …

    s3d Debian
  • Unscored —
    CVE-2014-1226

    The pipe_init_terminal function in main.c in s3dvt allows local users to gain privileges by leveraging setuid permissio…

    s3d Debian
  • Critical 9.8
    CVE-2014-3539

    Code injection in rope

    base/oi/doa.py in the Rope library in CPython (aka Python) allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load.

    rope rope rope Debian Ubuntu PyPI
  • Unscored —
    CVE-2014-2359

    OleumTech Wireless Sensor Network devices allow remote attackers to obtain sensitive information about sensor nodes or …

  • Unscored —
    CVE-2014-5034

    Cross-site request forgery (CSRF) vulnerability in the Brute Force Login Protection module 1.3 for WordPress allows rem…

  • Unscored —
    CVE-2014-5072

    Cross-site request forgery (CSRF) vulnerability in WP Security Audit Log plugin before 1.2.5 for WordPress allows remot…

  • Unscored —
    CVE-2018-7506

    The private key of the web server in Moxa MXview versions 2.8 and prior is able to be read and accessed via an HTTP GET…

    ICS-CERT Moxa MXview
  • Unscored —
    CVE-2018-1000156

    GNU Patch version 2.7.6 contains an input validation vulnerability when processing patch files, specifically the EDITOR…

    patch patch patch patch Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2018-1272

    Possible privilege escalation in org.springframework:spring-core

    Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests. When Spring MVC or Spring WebFlux server application (server A) receives input from a remote cli…

    Spring by Pivotal Spring Framework libspring-java org.springframework:spring-core Debian Maven
  • Medium 5.9
    CVE-2018-1271 Scanner template EPSS 30%

    Path Traversal in org.springframework:spring-core

    Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on …

    Spring by Pivotal Spring Framework org.springframework:spring-core Maven
  • Critical 9.8
    CVE-2018-1270 Public exploit EPSS 78%

    Spring Framework allows applications to expose STOMP over WebSocket endpoints

    Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious u…

    Spring by Pivotal Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Unscored —
    CVE-2017-18098

    The searchrequest-xml resource in Atlassian Jira before version 7.6.1 allows remote attackers to inject arbitrary HTML …

    Atlassian Jira Web / CMS
  • Unscored —
    CVE-2017-18097

    The Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote attackers who can convince a Ji…

    Atlassian Jira Web / CMS