2018-02-22

2018-02-23

2018-02-24

All (3) Critical (3) High (32) Medium (7)

CVE-2018-6859 Feb 23, 18:29 CRITICAL POC Act Now

SQL Injection exists in PHP Scripts Mall Schools Alert Management Script 2.0.2 via the Login Parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Schools Alert Management Script Schools Alert Management Script Project

NVD Exploit-DB

CVSS 3.0

9.8

EPSS

1.7%

CVE-2018-7440 Feb 23, 21:29 CRITICAL Act Now

An issue was discovered in Leptonica through 1.75.3. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Command Injection Debian Debian Linux Leptonica

NVD GitHub

CVSS 3.0

9.8

EPSS

3.7%

CVE-2018-7442 Feb 23, 21:29 CRITICAL Act Now

An issue was discovered in Leptonica through 1.75.3. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Path Traversal Leptonica

NVD

CVSS 3.0

9.1

EPSS

2.0%