Archive

25 April 2018

Vulnerabilities first published on this day (UTC), newest first.

← March 2018 2018 / April /25 May 2018 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 5.5

CVE-2018-1338

Moderate severity vulnerability that affects org.apache.tika:tika-core

A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's BPGParser in versions of Apache Tika before 1.18.

Apache Software Foundation Apache Tika tika tika Debian Ubuntu Maven

Apr 25, 2018
Medium 5.5

CVE-2018-1339

org.apache.tika:tika-parsers has an Infinite Loop vulnerability

A carefully crafted (or fuzzed) file can trigger an infinite loop in Apache Tika's ChmParser in versions of Apache Tika before 1.18.

Apache Software Foundation Apache Tika tika tika Debian Ubuntu Maven

Apr 25, 2018
Medium 6.1

CVE-2018-10366 Public exploit

User Plugin for October CSS Allows XSS

An issue was discovered in the Users (aka Front-end user management) plugin 1.4.5 for October CMS. XSS exists in the name field.

rainlab/user-plugin Packagist

Apr 25, 2018