Skip to content
OpenAdvisories

Archive

5 June 2018

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Unscored —
    CVE-2018-11586 Public exploit EPSS 15%

    XML external entity (XXE) vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote unauthenticated users to r…

  • Unscored —
    CVE-2016-9488 Public exploit

    ManageEngine Applications Manager versions 12 and 13 suffer from remote SQL injection vulnerabilities

    ManageEngine Applications Manager versions 12 and 13 before build 13200 suffer from remote SQL injection vulnerabilities. An unauthenticated attacker is able to access the URL /servlet/MenuHandlerServlet, which is vulnerable to SQL injection. The attacker cou…

  • Unscored —
    CVE-2018-11736 Public exploit

    An issue was discovered in Pluck before 4.7.7-dev2. /data/inc/images.php allows remote attackers to upload and execute …