CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

RedhatCVE•added 2026/01/09 12:09 p.m.•11 views

CVE-2018-18240

Pippo through 1.11.0 allows remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream's available protection mechanisms to restrict unmarshalling...

9.8CVSS7.8AI score0.03653EPSS

SaveExploits1References1

OSV•added 2018/10/11 7:29 a.m.•84 views

CVE-2018-18240

9.8CVSS7.8AI score

SaveExploits0References1

CVE•added 2018/10/11 7:00 a.m.•334 views

CVE-2018-18240

Pippo up to version 1.11.0 is vulnerable to remote code execution via a command to java.lang.ProcessBuilder because the XstreamEngine component does not use XStream’s available protection mechanisms to restrict unmarshalling.

9.8CVSS9.8AI score0.03653EPSS

SaveExploits1References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by