Skip to content
OpenAdvisories

Archive

July 2018

Vulnerabilities first published in this month (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-14009 Public exploit EPSS 38%

    Codiad remote code execution vulnerability

    Codiad through 2.8.4 allows Remote Code Execution, a different vulnerability than CVE-2017-11366 and CVE-2017-15689.

  • Critical 9.8
    CVE-2018-13797 Public exploit

    Command Injection in macaddress

    The macaddress module before 0.2.9 for Node.js is prone to an arbitrary command injection flaw, due to allowing unsanitized input to an exec (rather than execFile) call.