Skip to content
OpenAdvisories

Archive

5 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /5 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2018-1264

    Log Cache logs UAA client secret on startup

    Cloud Foundry Log Cache, versions prior to 1.1.1, logs its UAA client secret on startup as part of its envstruct report. A remote attacker who has gained access to the Log Cache VM can read this secret, gaining all privileges held by the Log Cache UAA client.…

    Cloud Foundry log-cache-release
  • Critical 9.0
    CVE-2018-15763

    PKS leaks IaaS Credentials to Application Logs

    Pivotal Container Service, versions prior to 1.2.0, contains an information disclosure vulnerability which exposes IaaS credentials to application logs. A malicious user with access to application logs may be able to obtain IaaS credentials and perform action…

    Pivotal Pivotal Container Service
  • Critical 9.8
    CVE-2014-10075

    karo Metacharacter Handling Remote Command Execution

    The karo gem 2.3.8 for Ruby allows Remote command injection via the host field.

    karo RubyGems