Archive

17 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /17 September 2018 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.8

CVE-2018-3784

Code Injection in cryo

A code injection in cryo 0.0.6 allows an attacker to arbitrarily execute code due to insecure implementation of deserialization.

https://github.com/hunterloftis cryo cryo npm

Aug 17, 2018
Critical 9.8

CVE-2018-3785

Command Injection in git-dummy-commit

A command injection in git-dummy-commit v1.3.0 allows os level commands to be executed due to an unescaped parameter.

https://github.com/stevemao git-dummy-commit git-dummy-commit npm

Aug 17, 2018
Critical 9.8

CVE-2018-3783 Public exploit

Privilege Escalation due to Blind NoSQL Injection in flintcms

A privilege escalation detected in flintcms versions <= 1.1.9 allows account takeover due to blind MongoDB injection in password reset.

https://github.com/JasonEtco flintcms flintcms npm

Aug 17, 2018