Skip to content
OpenAdvisories

Archive

12 February 2018

Vulnerabilities first published on this day (UTC), newest first.

← January 2018 2018 / February /12 March 2018 →
  1. 128
  2. 266
  3. 39
  4. 46
  5. 540
  6. 664
  7. 761
  8. 874
  9. 977
  10. 10 
  11. 113
  12. 1254
  13. 1329
  14. 1438
  15. 15340
  16. 1622
  17. 1731
  18. 1811
  19. 1943
  20. 2028
  21. 2147
  22. 2248
  23. 2359
  24. 2411
  25. 256
  26. 2630
  27. 2777
  28. 2828
All Critical High Medium Low Exploited only Public exploit

54 results · Feed

  • Unscored —
    CVE-2017-18177

    Progress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User Creation Page. This is …

  • Unscored —
    CVE-2018-6506

    Cross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use …

  • Unscored —
    CVE-2018-6881

    EmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a parameter to admin/tool/ShowPi…

  • Unscored —
    CVE-2018-6858

    Cross Site Scripting (XSS) exists in PHP Scripts Mall Facebook Clone Script.

  • Unscored —
    CVE-2018-6864

    Cross Site Scripting (XSS) exists in PHP Scripts Mall Multi religion Responsive Matrimonial 4.7.2 via a user profile up…

  • Unscored —
    CVE-2018-6880

    EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class…

  • Unscored —
    CVE-2018-6863

    SQL Injection exists in PHP Scripts Mall Select Your College Script 2.0.2 via a Login Parameter.

  • Unscored —
    CVE-2018-6888 Public exploit

    An issue was discovered in Typesetter 5.1. The User Permissions page (aka Admin/Users) suffers from critical flaw of Cr…

  • Unscored —
    CVE-2018-6861

    Cross Site Scripting (XSS) exists in PHP Scripts Mall Lawyer Search Script 1.0.2 via a profile update parameter.

  • Unscored —
    CVE-2018-6860

    Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script 2.0.2 via a p…

  • Unscored —
    CVE-2018-6889 Public exploit

    An issue was discovered in Typesetter 5.1. It suffers from a Host header injection vulnerability, Using this attack, a …

  • Unscored —
    CVE-2018-6862

    Cross Site Scripting (XSS) exists in PHP Scripts Mall Bitcoin MLM Software 1.0.2 via a profile field.

  • Unscored —
    CVE-2018-6845 Public exploit

    PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field.

  • Unscored —
    CVE-2018-6912

    The decode_plane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial …

    ffmpeg ffmpeg ffmpeg4 Debian Alpine