Archive
8 February 2018
Vulnerabilities first published on this day (UTC), newest first.
74 results · Feed
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…
-
Unscored —CVE-2017-17420 EPSS 48%
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…
-
Unscored —
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Back…
-
Low 3.6CVE-2018-1000030 Public exploit
Python 2.7.14 is vulnerable to a Heap-Buffer-Overflow as well as a Heap-Use-After-Free. Python versions prior to 2.7.14…
-
Unscored —
Z-BlogPHP 1.5.1 allows remote attackers to discover the full path via a direct request to zb_system/function/lib/upload…
-
Unscored —
A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITCon…
-
Unscored —
MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via …
-
Unscored —
Cross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier allo…
-
Unscored —
Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow authenticated attackers to…
-
Unscored —
Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker…
-
Unscored —
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attac…
-
Unscored —
A vulnerability in an operations script of Cisco UCS Central could allow an authenticated, remote attacker to execute a…
-
Critical 9.8
A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers…
KEV Mar 25, 2022 -
Unscored —
A vulnerability in the CLI of the Cisco StarOS operating system for Cisco ASR 5000 Series Aggregation Services Routers …
-
Unscored —
A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attack…
-
Unscored —
A vulnerability in the ingress packet processing functionality of the Cisco Virtualized Packet Core-Distributed Instanc…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthent…
-
Unscored —
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attac…
-
Unscored —
A vulnerability in Cisco Unified Communications Manager could allow an authenticated, remote attacker to access sensiti…
-
Unscored —
A vulnerability in the TCP throttling process of Cisco Prime Network could allow an unauthenticated, remote attacker to…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Data Center Analytics Framework could allow an unauthent…
-
Unscored —
A vulnerability in the RADIUS authentication module of Cisco Policy Suite could allow an unauthenticated, remote attack…
-
Unscored —
A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, …
-
Unscored —
A vulnerability in the spam quarantine of Cisco Email Security Appliance and Cisco Content Security Management Applianc…
-
Unscored —
A vulnerability in certain authentication controls in the account services of Cisco Spark could allow an authenticated,…
-
Unscored —
A vulnerability in the forwarding information base (FIB) code of Cisco IOS XR Software could allow an unauthenticated, …
-
Unscored —
A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC V…
-
Unscored —
The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an u…
-
Unscored —
static/js/pad_utils.js in Etherpad Lite before v1.6.3 has XSS via window.location.href.
-
Unscored —
MyBB 1.8.14 has XSS via the Title or Description field on the Edit Forum screen.
-
Critical 9.8
Etherpad Lite Access Restriction Bypass
node/hooks/express/apicalls.js in Etherpad Lite before v1.6.3 mishandles JSONP, which allows remote attackers to bypass intended access restrictions.