Archive
24 October 2018
Vulnerabilities first published on this day (UTC), newest first.
2 results · Clear filters · Feed
-
Critical 9.8
SaltStack Salt Remote command execution and incorrect access control when using salt-api
SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).
-
Critical 9.8
mysql-bunuuid-rails vulnerable to SQL injection
mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns.