Skip to content
OpenAdvisories

Archive

22 February 2018

Vulnerabilities first published on this day (UTC), newest first.

13 results · Clear filters · Feed

  • Unscored —
    CVE-2018-7314 Public exploit Scanner template EPSS 58%

    SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerabi…

  • Unscored —
    CVE-2018-7316 Public exploit

    Arbitrary File Upload exists in the Proclaim 9.1.1 component for Joomla! via a mediafileform action.

  • Unscored —
    CVE-2018-7318 Public exploit

    SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search, tag_search, name_search, descri…

  • Unscored —
    CVE-2018-7317 Public exploit

    Backup Download exists in the Proclaim 9.1.1 component for Joomla! via a direct request for a .sql file under backup/.

  • Unscored —
    CVE-2018-7297 Public exploit EPSS 64%

    Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attacker…

  • Unscored —
    CVE-2018-7315 Public exploit

    SQL Injection exists in the Ek Rishta 2.9 component for Joomla! via the gender, age1, age2, religion, mothertounge, cas…

  • Unscored —
    CVE-2018-7312 Public exploit

    SQL Injection exists in the Alexandria Book Library 3.1.2 component for Joomla! via the letter parameter.

  • Unscored —
    CVE-2018-7300 Public exploit EPSS 31%

    Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic …

  • Unscored —
    CVE-2018-7319 Public exploit

    SQL Injection exists in the OS Property Real Estate 3.12.7 component for Joomla! via the cooling_system1, heating_syste…

  • Unscored —
    CVE-2018-6890 Public exploit

    Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/…

  • Unscored —
    CVE-2018-7313 Public exploit EPSS 19%

    SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter.

  • Unscored —
    CVE-2018-7284 Public exploit EPSS 66%

    A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and C…

  • Unscored —
    CVE-2018-7286 Public exploit EPSS 53%

    An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asteri…