Skip to content
OpenAdvisories

Archive

August 2018

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • High 8.1
    CVE-2018-11776 Exploited Public exploit EPSS 100%

    Apache Struts vulnerable to remote command execution (RCE) due to improper input validation

    Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upp…

    KEV Nov 3, 2021
  • High 8.8
    CVE-2018-8414 Exploited Public exploit EPSS 73%

    A remote code execution vulnerability exists when the Windows Shell does not properly validate file paths, aka "Windows…

    KEV Mar 25, 2022
  • High 8.1
    CVE-2018-15133 Exploited Public exploit EPSS 77%

    Laravel Framework RCE Vulnerability

    In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and Pendi…

    KEV Jan 16, 2024