Skip to content
OpenAdvisories

Archive

7 June 2018

Vulnerabilities first published on this day (UTC), newest first.

← May 2018 2018 / June /7 July 2018 →
  1. 1151
  2. 25
  3. 3 
  4. 4136
  5. 560
  6. 630
  7. 7237
  8. 896
  9. 91
  10. 101
  11. 11349
  12. 1256
  13. 1359
  14. 1471
  15. 1548
  16. 164
  17. 1726
  18. 1827
  19. 1948
  20. 2035
  21. 2141
  22. 2226
  23. 2310
  24. 244
  25. 2529
  26. 26144
  27. 2731
  28. 2820
  29. 2937
  30. 305
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 10.0
    CVE-2017-16088 Public exploit

    Sandbox Breakout in safe-eval

    The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox.

    HackerOne safe-eval node module safe-eval npm
  • Critical 9.8
    CVE-2017-16082 Public exploit EPSS 10%

    Remote Code Execution in pg

    A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1) Executing unsafe, user-supplied sql whic…

    HackerOne pg node module node-postgres pg Debian Ubuntu npm