Archive
11 January 2018
Vulnerabilities first published on this day (UTC), newest first.
49 results · Feed
-
Unscored —
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the JSON, XML, NTP, XMPP, and GDB dissectors could crash. This was add…
-
Unscored —
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the IxVeriWave file parser could crash. This was addressed in wiretap/…
-
Unscored —
In Wireshark 2.4.0 to 2.4.3 and 2.2.0 to 2.2.11, the WCP dissector could crash. This was addressed in epan/dissectors/p…
-
Unscored —CVE-2012-0699 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in Family Connections CMS (aka FCMS) 2.9 and earlier allow r…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the DragonByte Technologies vbActivity module before 3.0.1 for v…
-
Unscored —
Cross-site scripting (XSS) vulnerability in downloads/actions/editdownload.php in the DragonByte Technologies vBDownloa…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in actions/main.php in the DragonByte Technologies Forumon RPG modu…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Shout Reports in the DragonByte Technologies vBShout module …
-
Unscored —
IBM WebSphere Portal 8.5 and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…
-
Unscored —
IBM WebSphere Application Server (IBM Liberty for Java for Bluemix 3.15) could allow a local attacker to obtain sensiti…
-
Unscored —
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, and 7.0.1 is vulnerable to cross-site scripting. This vulnerab…
-
Unscored —
IBM Curam Social Program Management 6.0.5, 6.1.1, 6.2.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This v…
-
Unscored —
IBM Security Access Manager Appliance 9.0.0 allows web pages to be stored locally which can be read by another user on …
-
Unscored —CVE-2018-5189 Public exploit
Race condition in Jungo Windriver 12.5.1 allows local users to cause a denial of service (buffer overflow) or gain syst…
-
Unscored —CVE-2012-6667 Public exploit
Cross-site scripting (XSS) vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletin allows …
-
Unscored —
The check_privileges method in vmdb/app/controllers/application_controller.rb in ManageIQ, as used in Red Hat CloudForm…
-
Unscored —
Directory traversal vulnerability in the web application in Symmetricom s350i 2.70.15 allows remote attackers to read a…
-
Unscored —
Symmetricom s350i 2.70.15 allows remote authenticated users to gain privileges via vectors related to pushing unauthent…
-
Unscored —CVE-2017-18016 Public exploit
Parity Browser 1.6.10 and earlier allows remote attackers to bypass the Same Origin Policy and obtain sensitive informa…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…
-
Unscored —
TP-Link WVR, WAR and ER devices allow remote authenticated administrators to execute arbitrary commands via command inj…