Archive
1 August 2018
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Critical 9.1
Arbitrary File Upload in GroupWise Administration Console
A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on the server. In certain circumstances this could result in remo…
-
Critical 9.4
An exploitable unauthenticated XML external injection vulnerability was identified in FocalScope v2416. A unauthenticat…
-
Critical 9.1
SQL Injection in pycsw
A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL (at least) it is possible to perform up…