Skip to content
OpenAdvisories

Archive

October 2018

Vulnerabilities first published in this month (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2016-6328 Public exploit

    A vulnerability was found in libexif. An integer overflow when parsing the MNOTE entry data of the input file. This can…

  • Medium 6.1
    CVE-2018-18548 Public exploit

    Ajenti Cross-site Scripting Via Filename

    ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.

  • Medium 4.3
    CVE-2018-11784 Public exploit EPSS 98%

    Apache Tomcat Open Redirect vulnerability

    When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redi…