Skip to content
OpenAdvisories

Archive

20 February 2018

Vulnerabilities first published on this day (UTC), newest first.

← January 2018 2018 / February /20 March 2018 →
  1. 128
  2. 266
  3. 39
  4. 46
  5. 540
  6. 664
  7. 761
  8. 874
  9. 977
  10. 10 
  11. 113
  12. 1254
  13. 1329
  14. 1438
  15. 15340
  16. 1622
  17. 1731
  18. 1811
  19. 1943
  20. 2028
  21. 2147
  22. 2248
  23. 2359
  24. 2411
  25. 256
  26. 2630
  27. 2777
  28. 2828
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2017-12415

    OXID eShop Community Edition before 6.0.0 RC2 (development), 4.10.x before 4.10.5 (maintenance), and 4.9.x before 4.9.1…

  • Unscored —
    CVE-2017-14993

    OXID eShop Community Edition before 6.0.0 RC3 (development), 4.10.x before 4.10.6 (maintenance), and 4.9.x before 4.9.1…

  • Unscored —
    CVE-2018-7265

    Shimmie 2 2.6.0 allows an attacker to upload a crafted SVG file that enables stored XSS.

  • Unscored —
    CVE-2017-17455

    Mahara 16.10 before 16.10.7, 17.04 before 17.04.5, and 17.10 before 17.10.2 are vulnerable to being forced, via a man-i…

  • Unscored —
    CVE-2017-17454

    Mahara 16.10 before 16.10.7 and 17.04 before 17.04.5 and 17.10 before 17.10.2 have a Cross Site Scripting (XSS) vulnera…

  • Unscored —
    CVE-2018-7263

    The mad_decoder_run() function in decoder.c in Underbit libmad through 0.15.1b allows remote attackers to cause a denia…

    libmad mpg321 Ubuntu Alpine
  • Critical 9.8
    CVE-2018-6487

    MFSBGN03799 rev.1 - Micro Focus UCMDB, Remote Disclosure of Information

    Remote Disclosure of Information in Micro Focus Universal CMDB Foundation Software, version numbers 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 4.10, 4.11. This vulnerability could be remotely exploited to allow disclosure of information.

    Micro Focus Universal CMDB Foundation Software
  • Unscored —
    CVE-2004-2779

    id3_utf16_deserialize() in utf16.c in libid3tag through 0.15.1b misparses ID3v2 tags encoded in UTF-16 with an odd numb…

    libid3tag libid3tag Debian Azure Linux
  • Unscored —
    CVE-2015-6544 Scanner template

    Cross-site scripting (XSS) vulnerability in application/dashboard.class.inc.php in Combodo iTop before 2.2.0-2459 allow…

  • Unscored —
    CVE-2018-5477

    An Information Exposure issue was discovered in ABB netCADOPS Web Application Version 3.4 and prior, netCADOPS Web Appl…

  • Unscored —
    CVE-2017-10963

    In Knox SDS IAM (Identity Access Management) and EMM (Enterprise Mobility Management) 16.11 on Samsung mobile devices, …

  • Unscored —
    CVE-2017-6192 Public exploit

    Buffer overflow in APNGDis 2.8 and earlier allows a remote attackers to cause denial of service and possibly execute ar…

  • Unscored —
    CVE-2017-6193 Public exploit

    Buffer overflow in APNGDis 2.8 and earlier allows remote attackers to cause a denial of service and possibly execute ar…

  • Unscored —
    CVE-2018-7046

    Arbitrary code execution vulnerability in Kentico 9 through 11 allows remote authenticated users to execute arbitrary o…

  • Unscored —
    CVE-2018-7205

    Reflected Cross-Site Scripting vulnerability in "Design" on "Edit device layout" in Kentico 9 through 11 allows remote …

  • Unscored —
    CVE-2018-6941 Public exploit

    A /shell?cmd= CSRF issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remo…

  • Unscored —
    CVE-2018-6940 Public exploit

    A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remot…

  • Medium 6.5
    CVE-2018-6356

    Improper Limitation of a Pathname to a Restricted Directory in Jenkins

    Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins mas…

    org.jenkins-ci.main:jenkins-core Maven
  • Unscored —
    CVE-2018-6459

    The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remot…

    strongswan Debian
  • Unscored —
    CVE-2016-6272 Public exploit EPSS 21%

    XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing …

  • Unscored —
    CVE-2017-16356 Public exploit

    Reflected XSS in Kubik-Rubik SIGE (aka Simple Image Gallery Extended) before 3.3.0 allows attackers to execute JavaScri…

  • Unscored —
    CVE-2015-2081

    Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts.

  • Unscored —
    CVE-2015-9255

    Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, conf…

  • Unscored —
    CVE-2015-9254

    Datto ALTO and SIRIS devices have a default VNC password.

  • Unscored —
    CVE-2015-9256

    Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mou…

  • Unscored —
    CVE-2017-18192

    smart/calculator/gallerylock/CalculatorActivity.java in the "Photo,Video Locker-Calculator" application through 18 for …

  • Unscored —
    CVE-2017-16835

    The "Photo,Video Locker-Calculator" application 12.0 for Android has android:allowBackup="true" in AndroidManifest.xml,…

  • Unscored —
    CVE-2018-7259

    The FSX / P3Dv4 installer 2.0.1.231 for Flight Sim Labs A320-X sends a user's Google account credentials to http://inst…