Skip to content
OpenAdvisories

Archive

September 2018

Vulnerabilities first published in this month (UTC), newest first.

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-15961 Exploited Public exploit Scanner template EPSS 100%

    Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an un…

    KEV Nov 3, 2021
  • Critical 9.8
    CVE-2018-17057 Public exploit EPSS 26%

    TCPDF vulnerable to attackers triggering deserialization of arbitrary data

    An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.

  • Critical 9.8
    CVE-2015-9266 Public exploit EPSS 74%

    Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload

    The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. An attacker can exploit this vulnerabil…

  • Critical 9.8
    CVE-2018-16385 Public exploit

    ThinkPHP SQL Injection vulnerability

    ThinkPHP before 5.1.23 allows SQL Injection via the public/index/index/test/index query string.