Skip to content
OpenAdvisories

Archive

15 January 2018

Vulnerabilities first published on this day (UTC), newest first.

4 results · Feed

  • Unscored —

    ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 is vulnerable to Cross-Site Request Forgery (CSRF) on /CWEBNET/* authenticated …

  • Unscored —

    ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows access to various /UserManagement/ privileged modules without authentica…

  • Unscored —
    CVE-2018-5702 Public exploit EPSS 12%

    Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access co…

  • Unscored —
    CVE-2018-5479 Public exploit

    FoxSash ImgHosting 1.5 (according to footer information) is vulnerable to XSS attacks. The affected function is its sea…