Skip to content
OpenAdvisories

Archive

15 March 2018

Vulnerabilities first published on this day (UTC), newest first.

53 results · Feed

  • Unscored —

    An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RI…

  • Unscored —

    An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSup…

  • Unscored —

    An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service (invalid memcpy…

  • Unscored —

    An issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles/source/FormatSupport/WEBP_Support.cpp do…

  • Unscored —

    An issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/Format…

  • Unscored —
    CVE-2018-8729 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote …

  • Unscored —

    server/app/views/static/code.html in Kontena before 1.5.0 allows XSS in "kontena master login --remote" code display, a…

  • Unscored —

    ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile (aka navpage.do), or the Search …

  • Unscored —

    Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026.

  • Unscored —

    Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 has Stored XSS related to the index2.do?url=editAlertForm&…

  • Unscored —

    ZenMate 1.5.4 for macOS suffers from a type confusion vulnerability within the com.zenmate.chron-xpc LaunchDaemon compo…

  • Unscored —

    The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, whic…

  • Unscored —
    CVE-2018-7886 Public exploit

    An issue was discovered in CloudMe 1.11.0. An unauthenticated local attacker that can connect to the "CloudMe Sync" cli…