Skip to content
OpenAdvisories

Archive

27 June 2018

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • High 7.5
    CVE-2018-1306 Public exploit EPSS 42%

    Exposure of Sensitive Information in Apache Pluto

    The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker coul…

  • Unscored —
    CVE-2018-12912 Public exploit

    An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via …

  • Unscored —
    CVE-2018-12908 Public exploit EPSS 10%

    Brynamics "Online Trade - Online trading and cryptocurrency investment system" allows remote attackers to obtain sensit…

  • Unscored —
    CVE-2018-12904 Public exploit

    In arch/x86/kvm/vmx.c in the Linux kernel before 4.17.2, when nested virtualization is used, local attackers could caus…