Skip to content
OpenAdvisories

Archive

11 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /11 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2018-1257

    Denial of Service in org.springframework:spring-core

    Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious…

    Pivotal Spring Framework libspring-java libspring-java Debian Ubuntu Maven
  • Medium 4.7
    CVE-2018-1261

    Path traversal in org.springframework.integration:spring-integration-zip

    Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So w…

    Pivotal Spring Integration Zip org.springframework.integration:spring-integration-zip Maven
  • Medium 4.3
    CVE-2016-8627

    admin-cli before versions 3.0.0.alpha25, 2.2.1.cr2 is vulnerable to an EAP feature to download server log files that al…

    [UNKNOWN] admin-cli