Skip to content
OpenAdvisories

Archive

24 October 2018

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.8
    CVE-2018-15442 Public exploit EPSS 16%

    Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability

    A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied paramet…

  • High 7.5

    Improper Input Validation in Apache Spark

    Spark's Apache Maven-based build includes a convenience script, 'build/mvn', that downloads and runs a zinc server to speed up compilation. It has been included in release branches since 1.3.x, up to and including master. This server will accept connections f…