Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

che-chun kuo vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2018-1306
The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote malicious user to obtain sensitive information, caused by the failure to restrict path information provided during a file upload. An attacker could exploit this ...
Apache Pluto 3.0.0
7.2
CVSSv3
CVE-2018-1321
An administrator with report and template entitlements in Apache Syncope 1.2.x prior to 1.2.11, 2.0.x prior to 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can use XSL Transformations (XSLT) to perform malicious operations, including but not limited...
Apache Syncope 1.0.8Apache Syncope 1.1.0Apache Syncope 1.1.7Apache Syncope 1.2.0Apache Syncope 1.0.0Apache Syncope 1.0.4Apache Syncope 1.0.5Apache Syncope 1.0.6Apache SyncopeApache Syncope 1.1.1Apache Syncope 1.1.2Apache Syncope 1.1.3Apache Syncope 1.1.4Apache Syncope 1.1.5Apache Syncope 1.0.7Apache Syncope 1.0.9Apache Syncope 1.1.6Apache Syncope 1.1.8
4.9
CVSSv3
CVE-2018-1322
An administrator with user search entitlements in Apache Syncope 1.2.x prior to 1.2.11, 2.0.x prior to 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can recover sensitive security values using the fiql and orderby parameters.
Apache SyncopeApache Syncope 1.1.4Apache Syncope 1.1.5Apache Syncope 1.1.6Apache Syncope 1.1.7Apache Syncope 1.0.5Apache Syncope 1.0.7Apache Syncope 1.0.6Apache Syncope 1.0.8Apache Syncope 1.0.0Apache Syncope 1.0.4Apache Syncope 1.0.9Apache Syncope 1.1.1Apache Syncope 1.1.3Apache Syncope 1.1.8Apache Syncope 1.0.3Apache Syncope 1.1.0Apache Syncope 1.1.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48700CVE-2022-48689CVE-2024-27956CVE-2023-6363SQLNULL pointer dereferenceCVE-2023-41830CVE-2015-2051arbitrary
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook