Archive
April 2018
Vulnerabilities first published in this month (UTC), newest first.
35 results · Clear filters · Feed
-
Critical 10.0
An exploitable heap overflow vulnerability exists in the tinysvcmdns library version 2016-07-18. A specially crafted pa…
-
Critical 9.8CVE-2017-2885 EPSS 23%
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58. A specially crafted HTTP req…
-
Critical 9.8
SaltStack Salt allows compromised salt-minions to impersonate the salt-master
In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.
-
Critical 9.8
thinkphp SQL Injection via the index.php s parameter
thinkphp 3.1.3 has SQL Injection via the index.php s parameter.
-
Critical 9.8
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). …
KEV Sep 8, 2022 -
Critical 9.8
CSV Injection vulnerability with exported contact lists in Mautic
Mautic before 2.13.0 allows CSV injection.
-
Critical 9.6
Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application…
-
Critical 9.8
diffoscope writes to arbitrary locations on disk based on the contents of an untrusted archive
diffoscope before 77 writes to arbitrary locations on disk based on the contents of an untrusted archive.
-
Critical 9.8
Junos OS: Kernel crash upon receipt of crafted CLNP datagrams
Receipt of a specially crafted Connectionless Network Protocol (CLNP) datagram destined to an interface of a Junos OS device may result in a kernel crash or lead to remote code execution. Devices are only vulnerable to the specially crafted CLNP datagram if '…
-
Critical 10.0
An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AW…
-
Critical 9.8
Spring Data Commons remote code injection vulnerability
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can sup…
KEV Mar 25, 2022 -
Critical 9.8CVE-2018-1275 EPSS 58%
Spring Framework has Improperly Implemented Security Check for Standard
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious u…
-
Critical 9.8
Code injection in rope
base/oi/doa.py in the Rope library in CPython (aka Python) allows remote attackers to execute arbitrary code by leveraging an unsafe call to pickle.load.
-
Critical 9.8
Spring Framework allows applications to expose STOMP over WebSocket endpoints
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious u…
-
Critical 10.0CVE-2017-14464 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14473 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14466 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14462 EPSS 35%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14467 EPSS 37%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14463 EPSS 39%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14470 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14471 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14472 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14465 EPSS 35%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14468 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14469 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 9.0
An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8.…
-
Critical 10.0
An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. …
-
Critical 10.0
An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8. A spe…
-
Critical 10.0
An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek Neu…
-
Critical 9.1
SQL Injection in hive-jdbc
This vulnerability in Apache Hive JDBC driver 0.7.1 to 2.3.2 allows carefully crafted arguments to be used to bypass the argument escaping/cleanup that JDBC driver does in PreparedStatement implementation.
-
Critical 9.1
Koji hub call does not perform correct access checks
Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1.
-
Critical 9.8
IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker to execute system comm…
-
Critical 9.8
Apache serialization mechanism does not have a list of classes allowed for serialization/deserialization
In Apache Ignite 2.3 or earlier, the serialization mechanism does not have a list of classes allowed for serialization/deserialization, which makes it possible to run arbitrary code when 3-rd party vulnerable classes are present in Ignite classpath. The vulne…
-
Critical 10.0
An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running f…