Archive
30 October 2018
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
Critical 10.0
Command Injection in apex-publish-static-files
A command injection vulnerability in the apex-publish-static-files npm module version <2.0.1 which allows arbitrary shell command execution through a maliciously crafted argument.
-
Critical 9.8CVE-2018-14558 Exploited
An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware thro…
KEV Nov 3, 2021 -
Critical 9.8
Unrestricted Upload of File with Dangerous Type in mingsoft:ms-mcms
An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not verify the user login status, you can use this interface to upload files without setting a cookie. First, start an upload of JSP code w…