Archive
4 April 2019
Vulnerabilities first published on this day (UTC), newest first.
3 results · Clear filters · Feed
-
High 8.8
Pimcore Unserialize Remote Code Execution
An issue was discovered in Pimcore before 5.7.1. An attacker with classes permission can send a POST request to /admin/class/bulk-commit, which will make it possible to exploit the unserialize function when passing untrusted values in the data parameter to bu…
-
Unscored —
A command injection vulnerability exists in TeemIp versions before 2.4.0. The new_config parameter of exec.php allows o…
-
Unscored —CVE-2019-10273 Public exploit
Information leakage vulnerability in the /mc login page in ManageEngine ServiceDesk Plus 9.3 software allows authentica…