CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

65 matches found

NVD•added 2018/10/11 7:29 a.m.•14 views

CVE-2018-18240

Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream's available protection mechanisms to restrict unmarshalling...

9.8CVSS9.8AI score0.03653EPSS

SaveExploits1References1

Prion•added 2018/10/11 7:29 a.m.•14 views

Remote code execution

7.5CVSS9.7AI score0.03653EPSS

SaveExploits1References1Affected Software1

OSV•added 2018/10/11 7:29 a.m.•82 views

CVE-2018-18240

9.8CVSS7.8AI score

SaveExploits0References1

Cvelist•added 2018/10/11 7:0 a.m.•24 views

CVE-2018-18240

9.8AI score0.03653EPSS

SaveExploits1References1

CVE•added 2018/10/11 7:0 a.m.•328 views

CVE-2018-18240

Pippo up to version 1.11.0 is vulnerable to remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream’s available protection mechanisms to restrict unmarshalling.

9.8CVSS9.8AI score0.03653EPSS

SaveExploits1References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by