Skip to content
OpenAdvisories

Archive

30 October 2018

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 10.0

    Command Injection in apex-publish-static-files

    A command injection vulnerability in the apex-publish-static-files npm module version <2.0.1 which allows arbitrary shell command execution through a maliciously crafted argument.

  • Critical 9.8
    CVE-2018-14558 Exploited

    An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware thro…

    KEV Nov 3, 2021
  • Critical 9.8

    Unrestricted Upload of File with Dangerous Type in mingsoft:ms-mcms

    An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not verify the user login status, you can use this interface to upload files without setting a cookie. First, start an upload of JSP code w…