Skip to content
OpenAdvisories

Archive

16 January 2018

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Unscored —
    CVE-2018-5726 Public exploit EPSS 20%

    MASTER IPCAMERA01 3.3.4.2103 devices allow remote attackers to obtain sensitive information via a crafted HTTP request,…

  • Unscored —
    CVE-2018-5725 Public exploit

    MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Change, as demonstrated by the port number of …

  • Unscored —
    CVE-2018-5723 Public exploit

    MASTER IPCAMERA01 3.3.4.2103 devices have a hardcoded password of cat1029 for the root account.

  • Unscored —
    CVE-2018-5724 Public exploit EPSS 12%

    MASTER IPCAMERA01 3.3.4.2103 devices allow Unauthenticated Configuration Download and Upload, as demonstrated by restor…

  • Unscored —
    CVE-2018-5715 Public exploit Scanner template

    phprint.php in SugarCRM 3.5.1 has XSS via a parameter name in the query string (aka a $key variable).

  • Unscored —
    CVE-2018-5370 Public exploit

    BizLogic xnami 1.0 has XSS via the comment parameter in an addComment action to the /media/ajax URI.

  • Unscored —
    CVE-2017-8802 Public exploit

    Cross-site scripting (XSS) vulnerability in Zimbra Collaboration Suite (aka ZCS) before 8.8.0 Beta2 might allow remote …

  • Unscored —
    CVE-2018-5711 Public exploit EPSS 13%

    gd_gif_in.c in the GD Graphics Library (aka libgd), as used in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1…