Archive
February 2018
Vulnerabilities first published in this month (UTC), newest first.
1,330 results · Feed
-
Unscored —
In app/Controller/ServersController.php in MISP 2.4.87, a server setting permitted the override of a path variable on c…
-
Unscored —CVE-2016-8742 Public exploit
The Windows installer that the Apache CouchDB team provides was vulnerable to local privilege escalation. All files in …
-
High 8.8
Apache Thrift Go Library Command Injection
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0.
-
Unscored —
controllers/member/Api.php in dayrui FineCms 5.2.0 has SQL Injection: a request with s=member,c=api,m=checktitle, and t…
-
Unscored —
Progress Sitefinity 9.1 has XSS via the Content Management Template Configuration (aka Templateconfiguration), as demon…
-
Unscored —
Authenticate/SWT in Progress Sitefinity 9.1 has an open redirect issue in which an authentication token is sent to the …
-
Unscored —
Progress Sitefinity 9.1 has XSS via file upload, because JavaScript code in an HTML file has the same origin as the app…
-
Unscored —
Progress Sitefinity 9.1 uses wrap_access_token as a non-expiring authentication token that remains valid after a passwo…
-
Unscored —
Progress Sitefinity 9.1 has XSS via the Last name, First name, and About fields on the New User Creation Page. This is …
-
Unscored —
Cross-Site Scripting (XSS) exists in the Add Forum feature in the Administrative Panel in miniBB 3.2.2 via crafted use …
-
Unscored —
EmpireCMS 6.6 allows remote attackers to discover the full path via an array value for a parameter to admin/tool/ShowPi…
-
Unscored —
Cross Site Scripting (XSS) exists in PHP Scripts Mall Facebook Clone Script.
-
Unscored —
Cross Site Scripting (XSS) exists in PHP Scripts Mall Multi religion Responsive Matrimonial 4.7.2 via a user profile up…
-
Unscored —
EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class…
-
Unscored —
SQL Injection exists in PHP Scripts Mall Select Your College Script 2.0.2 via a Login Parameter.
-
Unscored —CVE-2018-6888 Public exploit
An issue was discovered in Typesetter 5.1. The User Permissions page (aka Admin/Users) suffers from critical flaw of Cr…
-
Unscored —
Cross Site Scripting (XSS) exists in PHP Scripts Mall Lawyer Search Script 1.0.2 via a profile update parameter.
-
Unscored —
Arbitrary File Upload and Remote Code Execution exist in PHP Scripts Mall Schools Alert Management Script 2.0.2 via a p…
-
Unscored —CVE-2018-6889 Public exploit
An issue was discovered in Typesetter 5.1. It suffers from a Host header injection vulnerability, Using this attack, a …
-
Unscored —
Cross Site Scripting (XSS) exists in PHP Scripts Mall Bitcoin MLM Software 1.0.2 via a profile field.
-
Unscored —CVE-2018-6845 Public exploit
PHP Scripts Mall Multi Language Olx Clone Script 2.0.6 has XSS via the Leave Comment field.
-
Unscored —
The decode_plane function in libavcodec/utvideodec.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial …
-
Unscored —
An issue was discovered in CloudMe before 1.11.0. An unauthenticated remote attacker that can connect to the "CloudMe S…
-
Unscored —
In the Linux kernel before 4.7, the amd_gpio_remove function in drivers/pinctrl/pinctrl-amd.c calls the pinctrl_unregis…
-
Unscored —
Bookly #1 WordPress Booking Plugin Lite before 14.5 has XSS via a jQuery.ajax request to ng-payment_details_dialog.js.
-
Unscored —
An out-of-bounds read exists in Info-Zip UnZip version 6.10c22 that allows an attacker to perform a denial of service a…
-
Unscored —
Security Onion Solutions Squert version 1.0.1 through 1.6.7 contains a CWE-78: Improper Neutralization of Special Eleme…
-
Unscored —
NASA Pyblock version v1.0 - v1.3 contains a CWE-502 vulnerability in Radar data parsing library that can result in remo…
-
Unscored —
Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the mine…
-
High 8.3
XXE vulnerability in Jenkins Android Lint Plugin
Jenkins Android Lint Plugin 2.5 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, o…
-
Unscored —
Linux kernel version after commit bdcf0a423ea1 - 4.15-rc4+, 4.14.8+, 4.9.76+, 4.4.111+ contains a Incorrect Access Cont…
-
High 8.3
Jenkins CCM Plugin vulnerable to Improper Restriction of XML External Entity Reference
Jenkins CCM Plugin 3.1 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in Jenkins to extract secrets from the Jenkins master, perform server-side request forgery, or denial-…
-
Unscored —
GIT version 2.15.1 and earlier contains a Input Validation Error vulnerability in Client that can result in problems in…
-
Unscored —
NASA Kodiak version v1.0 contains a CWE-502 vulnerability in Kodiak library's data processing function that can result …
-
Unscored —
GNOME librsvg version before commit c6ddf2ed4d768fd88adbea2b63f575cd523022ea contains a Improper input validation vulne…
-
Unscored —
Security Onion Solutions Squert version 1.1.1 through 1.6.7 contains a SQL Injection vulnerability in .inc/callback.php…
-
Unscored —
NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval …
-
High 8.1
Jerome Gamez Firebase Admin SDK for PHP Incorrect Access Control vulnerability
Jerome Gamez Firebase Admin SDK for PHP version from 3.2.0 to 3.8.0 contains a Incorrect Access Control vulnerability in src/Firebase/Auth/IdTokenVerifier.php does not verify for token signature that can result in JWT with any email address and user ID could …
-
Medium 4.3
Jenkins Credentials Binding Plugin has Insufficiently Protected Credentials
Jenkins Credentials Binding Plugin 1.14 and earlier masks passwords it provides to build processes in their build logs. Jenkins however transforms provided password values, e.g. replacing environment variable references, which could result in values different…
-
Unscored —
fmtlib version prior to version 4.1.0 (before commit 0555cea5fc0bf890afe0071a558e44625a34ba85) contains a Memory corrup…