Skip to content
OpenAdvisories

Archive

8 February 2018

Vulnerabilities first published on this day (UTC), newest first.

74 results · Feed

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.3.6 for WordPress allows remote attackers t…

  • Unscored —

    The javax.naming.directory.AttributeInUseException class in the Virtual Member Manager in IBM WebSphere Application Ser…

  • Critical 9.8
    CVE-2018-6789 Exploited · Ransomware Public exploit EPSS 82%

    An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. By sending a handcrafted me…

    KEV Nov 3, 2021
  • Unscored —
    CVE-2018-6180 Public exploit

    A flaw in the profile section of Online Voting System 1.0 allows an unauthenticated user to set an arbitrary password f…

  • Unscored —

    SBLIM Small Footprint CIM Broker (SFCB) 1.4.9 has a null pointer (DoS) vulnerability via a crafted POST request to the …

  • Unscored —

    Nitro Pro 7.5.0.22 and earlier and Nitro Reader 2.5.0.36 and earlier allow remote attackers to execute arbitrary code v…

  • Unscored —

    Nitro Pro 7.5.0.29 and earlier and Nitro Reader 2.5.0.45 and earlier allow remote attackers to execute arbitrary code v…

  • Unscored —

    Use-after-free vulnerability in SumatraPDF Reader 2.x before 2.2.1 allows remote attackers to execute arbitrary code vi…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in Fortinet FortiGate UTM WAF appliances with FortiOS 4.3.x before …

  • Unscored —

    IBM Sametime allows remote attackers to obtain sensitive information from the Sametime Log database via a direct reques…

  • Unscored —

    IBM XIV Storage System 2810-A14 and 2812-A14 devices before level 10.2.4.e-2 and 2810-114 and 2812-114 devices before l…

  • Unscored —

    Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted QT file.

  • Unscored —

    Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted ASF file.

  • Unscored —

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • High 8.8

    Borg Improper Access Control vulnerability

    Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers 1.1.x before 1.1.3.

  • Unscored —

    A vulnerability in the IPv6 stack on Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) versions before…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the web-based management interface of Brocade Fibre Channel SAN products ru…

  • Unscored —
    CVE-2018-5550 EPSS 37%

    Versions of Epson AirPrint released prior to January 19, 2018 contain a reflective cross-site scripting (XSS) vulnerabi…

  • Unscored —
    CVE-2018-1161 EPSS 67%

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —
    CVE-2018-1163 EPSS 16%

    This vulnerability allows remote attackers to bypass authentication on vulnerable installations of Quest NetVault Backu…

  • Unscored —

    This vulnerability allows remote attackers to create a denial-of-service condition on vulnerable installations of Quest…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —
    CVE-2017-17417 Public exploit

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…

  • Unscored —

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…