Skip to content
OpenAdvisories

Archive

24 October 2018

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8

    SaltStack Salt Remote command execution and incorrect access control when using salt-api

    SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).

  • Critical 9.8

    mysql-bunuuid-rails vulnerable to SQL injection

    mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns.