Skip to content
OpenAdvisories

Archive

30 September 2018

Vulnerabilities first published on this day (UTC), newest first.

6 results · Feed

  • Unscored —

    An issue was discovered in zzcms 8.3. user/zssave.php allows remote attackers to delete arbitrary files via directory t…

  • Unscored —

    The function t2p_write_pdf in tiff2pdf.c in LibTIFF 4.0.9 and earlier allows remote attackers to cause a denial of serv…

  • Unscored —

    An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a NULL pointer d…

  • Unscored —

    An issue was discovered in zzcms 8.3. user/ztconfig.php allows remote attackers to delete arbitrary files via an absolu…

  • Unscored —

    An issue was discovered in MRCMS (aka mushroom) through 3.1.2. The WebParam.java file directly accepts the FIELD_T para…

  • High 7.5

    In blynk-server a Directory Traversal exists

    In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file.