Archive

26 April 2018

Vulnerabilities first published on this day (UTC), newest first.

← March 2018 2018 / April /26 May 2018 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 5.9

CVE-2018-10237

Denial of Service in Google Guava

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (w…

druid guava-libraries com.google.guava:guava guava-libraries Debian Ubuntu Wolfi Maven

Apr 26, 2018
Medium 6.5

CVE-2016-9590

puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to an information-disclosure in Red Hat OpenStack Platform dire…

puppet-module-swift puppet-module-swift Debian Ubuntu

Apr 26, 2018
Medium 6.5

CVE-2017-15691

Improper Restriction of XML External Entity Reference in Apache uimaj

In Apache uimaj prior to 2.10.2, Apache uimaj 3.0.0-xxx prior to 3.0.0-beta, Apache uima-as prior to 2.10.2, Apache uimaFIT prior to 2.4.0, Apache uimaDUCC prior to 2.2.2, this vulnerability relates to an XML external entity expansion (XXE) capability of vari…

Apache Software Foundation Apache UIMA uimaj org.apache.uima:uimaj-core Debian Ubuntu Maven

Apr 26, 2018
Medium 4.8

CVE-2017-9284

IDM 4.6 Identity Applications information leakage

IDM 4.6 Identity Applications prior to 4.6.2.1 may expose sensitive information.

NetIQ IDM - Identity Applications

Apr 26, 2018
Medium 4.8

CVE-2017-14740

GeniXCMS Cross-site scripting (XSS) vulnerability

Cross-site scripting (XSS) vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu.

genix/cms Packagist

Apr 26, 2018