August 2018

5 results · Clear filters · Feed

• High 8.1
  CVE-2018-11776 Exploited Public exploit EPSS 100%

  Apache Struts vulnerable to remote command execution (RCE) due to improper input validation

  Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upp…

  Apache Software Foundation Apache Struts org.apache.struts:struts2-core Maven
  Aug 22, 2018

  KEV Nov 3, 2021
• High 8.8
  CVE-2018-8414 Exploited Public exploit EPSS 73%

  A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows…

  Microsoft Windows 10 Windows 10 Servers Windows
  Aug 15, 2018

  KEV Mar 25, 2022
• High 8.1
  CVE-2018-15133 Exploited Public exploit EPSS 77%

  Laravel Framework RCE Vulnerability

  In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and Pendi…

  laravel/framework Packagist
  Aug 9, 2018

  KEV Jan 16, 2024
• Critical 9.8
  CVE-2018-14933 Exploited Public exploit EPSS 95%

  upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir pa…

  Aug 4, 2018

  KEV Dec 18, 2024
• Critical 9.1
  CVE-2018-14847 Exploited Public exploit EPSS 96%

  MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated…

  Aug 2, 2018

  KEV Dec 1, 2021