Archive
February 2018
Vulnerabilities first published in this month (UTC), newest first.
1,330 results · Feed
-
Unscored —
Reflected Cross-Site Scripting vulnerability in "Design" on "Edit device layout" in Kentico 9 through 11 allows remote …
-
Unscored —CVE-2018-6941 Public exploit
A /shell?cmd= CSRF issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remo…
-
Unscored —CVE-2018-6940 Public exploit
A /shell?cmd= XSS issue exists in the HTTPD component of NAT32 v2.2 Build 22284 devices that can be exploited for Remot…
-
Medium 6.5
Improper Limitation of a Pathname to a Restricted Directory in Jenkins
Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin resource files. This allowed users with Overall/Read permission to download files from the Jenkins mas…
-
Unscored —
The rsa_pss_params_parse function in libstrongswan/credentials/keys/signature_params.c in strongSwan 5.6.1 allows remot…
-
Unscored —
XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing …
-
Unscored —CVE-2017-16356 Public exploit
Reflected XSS in Kubik-Rubik SIGE (aka Simple Image Gallery Extended) before 3.3.0 allows attackers to execute JavaScri…
-
Unscored —
Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts.
-
Unscored —
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, conf…
-
Unscored —
Datto ALTO and SIRIS devices have a default VNC password.
-
Unscored —
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mou…
-
Unscored —
smart/calculator/gallerylock/CalculatorActivity.java in the "Photo,Video Locker-Calculator" application through 18 for …
-
Unscored —
The "Photo,Video Locker-Calculator" application 12.0 for Android has android:allowBackup="true" in AndroidManifest.xml,…
-
Unscored —
The FSX / P3Dv4 installer 2.0.1.231 for Flight Sim Labs A320-X sends a user's Google account credentials to http://inst…
-
Unscored —
The ParseDsdiffHeaderConfig function of the cli/dsdiff.c file of WavPack 5.1.0 allows a remote attacker to cause a deni…
-
Unscored —CVE-2018-7254 Public exploit
The ParseCaffHeaderConfig function of the cli/caff.c file of WavPack 5.1.0 allows a remote attacker to cause a denial-o…
-
Critical 9.8
Anchor CMS Logs Credentials
An issue was discovered in config/error.php in Anchor 0.12.3. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error (such as "Too many connections") has occurred.
-
Unscored —
An issue was discovered in OXID eShop Enterprise Edition before 5.3.7 and 6.x before 6.0.1. By entering specially craft…
-
Unscored —
SQL injection vulnerability in the "Marketing > Forms" screen in dotCMS before 3.7.2 and 4.x before 4.1.1 allows remote…
-
Unscored —
SQL injection vulnerability in the "Content Types > Content Types" screen in dotCMS before 3.7.2 and 4.x before 4.1.1 a…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the filemanager in the Photo Gallery plugin before 1.2.13 for WordPress all…
-
Unscored —
An issue was discovered in PHP 7.3.x before 7.3.0alpha3, 7.2.x before 7.2.8, and before 7.1.20. The php-fpm master proc…
-
Unscored —
GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR …
-
Unscored —
Unisys Stealth 3.3 Windows endpoints before 3.3.016.1 allow local users to gain access to Stealth-enabled devices by le…
-
Unscored —
Adobe Shockwave Player before 11.6.4.634 allows attackers to execute arbitrary code or cause a denial of service (memor…
-
Unscored —
Directory traversal vulnerability in Apexis APM-J601-WS cameras with firmware before 17.35.2.49 allows remote attackers…
-
Unscored —
A security design issue can allow an unprivileged user to interact with the Carbon Black Sensor and perform unauthorize…
-
Unscored —
DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of …
-
Unscored —
The project import functionality in SoapUI 5.3.0 allows remote attackers to execute arbitrary Java code via a crafted r…
-
Critical 9.8
A flaw in libxml2 allows remote XML entity inclusion with default parser flags (i.e., when the caller did not request e…
-
Unscored —
Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port …
-
Unscored —
An issue was discovered in Apexis APM-H803-MPC software, as used with many different models of IP Camera. An unprotecte…
-
Unscored —
An issue was discovered in pixHtmlViewer in prog/htmlviewer.c in Leptonica before 1.75.3. Unsanitized input (rootname) …
-
Unscored —
An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in GE D60 Line Distance…
-
Unscored —
A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior. A remote attac…
-
Unscored —
A Stack-based Buffer Overflow issue was discovered in GE D60 Line Distance Relay devices running firmware Version 7.11 …
-
Unscored —
An issue was discovered in vcSetXCutTextProc() in VNConsole.c in LinuxVNC and VNCommand from the LibVNC/vncterm distrib…
-
High 7.5
OpenStack Nova Denial of service attack on the compute host
An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1. By detaching and reattaching an encrypted volume, an attacker may access the underlying raw volume and corrupt the LUKS header, resulting in a denial of service attack on t…
-
Unscored —
The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof…
-
Unscored —
An issue was discovered in LibVNCServer through 0.9.11. rfbProcessClientNormalMessage() in rfbserver.c does not sanitiz…