Skip to content
OpenAdvisories

Archive

25 April 2018

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 8.1
    CVE-2018-1335 Public exploit Scanner template EPSS 94%

    Command injection in org.apache.tika:tika-core

    From Apache Tika versions 1.7 to 1.17, clients could send carefully crafted headers to tika-server that could be used to inject commands into the command line of the server running tika-server. This vulnerability only affects those running tika-server on a se…

  • High 8.0

    glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthent…