Skip to content
OpenAdvisories

Archive

21 February 2018

Vulnerabilities first published on this day (UTC), newest first.

47 results · Feed

  • Unscored —

    An issue was discovered on Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) devices. Remote attackers can obtai…

  • Unscored —

    An issue was discovered on RLE Wi-MGR/FDS-Wi 6.2 devices. Persistent XSS exists in the web server. Remote attackers can…

  • Unscored —

    An issue was discovered on RLE Protocol Converter FDS-PC / FDS-PC-DP 2.1 devices. Persistent XSS exists in the web serv…

  • Medium 6.1

    Yab Quarx persistent cross-site scripting vulnerability

    Yab Quarx through 2.4.3 is prone to multiple persistent cross-site scripting vulnerabilities: Blog (Title), FAQ (Question), Pages (Title), Widgets (Name), and Menus (Name).

  • Unscored —

    An issue was discovered in MetInfo 6.0.0. In install/install.php in the installation process, the config/config_db.php …

  • Unscored —
    CVE-2018-7273 Public exploit

    In the Linux kernel through 4.15.4, the floppy driver reveals the addresses of kernel functions and global variables us…

  • Unscored —

    The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain se…