Skip to content
OpenAdvisories

Archive

April 2018

Vulnerabilities first published in this month (UTC), newest first.

← March 2018 2018 / April May 2018 →
  1. 18
  2. 225
  3. 3170
  4. 4163
  5. 557
  6. 614
  7. 710
  8. 85
  9. 914
  10. 1050
  11. 1188
  12. 12112
  13. 1346
  14. 148
  15. 157
  16. 1641
  17. 1731
  18. 18282
  19. 19200
  20. 2036
  21. 2110
  22. 2210
  23. 2327
  24. 2497
  25. 2547
  26. 2636
  27. 2729
  28. 283
  29. 2915
  30. 3029
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-2628 Exploited Public exploit Scanner template EPSS 100%

    Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). …

    Oracle WebLogic Server
    KEV Sep 8, 2022
  • Critical 10.0
    CVE-2017-14459 Public exploit EPSS 13%

    An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AW…

    Talos Moxa
  • Critical 9.8
    CVE-2018-1273 Exploited · Ransomware Public exploit Scanner template EPSS 97%

    Spring Data Commons remote code injection vulnerability

    Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can sup…

    Spring by Pivotal Spring Framework org.springframework.data:spring-data-commons Maven
    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2018-1270 Public exploit EPSS 78%

    Spring Framework allows applications to expose STOMP over WebSocket endpoints

    Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious u…

    Spring by Pivotal Spring Framework libspring-java libspring-java Debian Ubuntu Maven