Archive

11 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /11 November 2018 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2018-9206 Public exploit Scanner template EPSS 97%

Unrestricted Upload of File with Dangerous Type in blueimp-file-upload

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

Blueimp Blueimp jQuery-File-Upload libjs-jquery-file-upload blueimp-file-upload Debian Ubuntu npm

Oct 11, 2018
Critical 9.8

CVE-2018-18240

Pippo RCE Vulnerability

Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream's available protection mechanisms to restrict unmarshalling.

ro.pippo:pippo-core ro.pippo:pippo-session Maven

Oct 11, 2018