Skip to content
OpenAdvisories

Archive

20 August 2018

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8

    phpWhois arbitrary code execution via a crafted whois record

    phpWhois allows remote attackers to execute arbitrary code via a crafted whois record.

  • Critical 9.8
    CVE-2018-1000226 Scanner template EPSS 13%

    Cobbler Improper Validation of Security Tokens

    Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Incorrect Access Control vulnerability in XMLRPC API (/cobbler_api) that can result in P…

  • Critical 10.0

    Eclipse RDF4j vulnerable to XML External Entity

    Eclipse RDF4j version < 2.4.0 Milestone 2 contains a XML External Entity (XXE) vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of service, server side request forgery, port scanning. This atta…