Archive

14 September 2018

Vulnerabilities first published on this day (UTC), newest first.

← August 2018 2018 / September /14 October 2018 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2018-17057 Public exploit EPSS 26%

TCPDF vulnerable to attackers triggering deserialization of arbitrary data

An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.

tcpdf tcpdf tecnickcom/tcpdf fooman/tcpdf Debian Ubuntu Packagist

Sep 14, 2018