Skip to content
OpenAdvisories

Archive

13 August 2018

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Unscored —
    CVE-2018-15140 Public exploit EPSS 16%

    Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authen…

  • Unscored —
    CVE-2018-15139 Public exploit EPSS 19%

    Unrestricted file upload in interface/super/manage_site_files.php in versions of OpenEMR before 5.0.1.4 allows a remote…

  • Unscored —
    CVE-2018-15141 Public exploit EPSS 14%

    Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authen…

  • Unscored —
    CVE-2018-15142 Public exploit EPSS 18%

    Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authen…

  • Unscored —
    CVE-2018-13415 Public exploit EPSS 31%

    In Plex Media Server 1.13.2.5154, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External E…

  • Unscored —
    CVE-2018-13417 Public exploit EPSS 20%

    In Vuze Bittorrent Client 5.7.6.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML External …

  • Medium 4.2
    CVE-2018-11770 Public exploit EPSS 66%

    org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability

    From version 1.3.0 onward, Apache Spark's standalone master exposes a REST API for job submission, in addition to the submission mechanism used by spark-submit. In standalone, the config property 'spark.authenticate.secret' establishes a shared secret for aut…