Archive
20 March 2018
Vulnerabilities first published on this day (UTC), newest first.
61 results · Feed
-
Unscored —
Netwide Assembler (NASM) 2.13.02rc2 has a heap-based buffer over-read in the function tokenize in asm/preproc.c, relate…
-
Unscored —
Netwide Assembler (NASM) 2.13.02rc2 has a buffer over-read in the parse_line function in asm/parser.c via uncontrolled …
-
Unscored —
Netwide Assembler (NASM) 2.13.02rc2 has a stack-based buffer under-read in the function ieee_shr in asm/float.c via a l…
-
Unscored —
In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or p…
-
Unscored —
In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or p…
-
Unscored —
In 2345 Security Guard 3.6, the driver file (2345Wrath.sys) allows local users to cause a denial of service (BSOD) or p…
-
Unscored —
In 2345 Security Guard 3.6, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD…
-
Unscored —
XML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows rem…
-
Unscored —
IBM Rational Collaborative Lifecycle Management (CLM) 4.0.x before 4.0.7 iFix10, 5.0.x before 5.0.2 iFix15, 6.0.x befor…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows re…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows re…
-
Unscored —
Cross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows re…
-
Unscored —
enhavo 0.4.0 has XSS via a user-group that contains executable JavaScript code in the user-group name. The XSS attack l…
-
Unscored —
Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors rela…
-
Unscored —
Open Web Analytics (OWA) before 1.5.6 improperly generates random nonce values, which makes it easier for remote attack…
-
Unscored —CVE-2014-1665 Public exploit
Cross-site scripting (XSS) vulnerability in ownCloud before 6.0.1 allows remote authenticated users to inject arbitrary…
-
Unscored —
SQL injection vulnerability in Invision Power Board (aka IPB or IP.Board) before 3.4.6 allows remote attackers to execu…
-
Unscored —
The Cart::getProducts method in system/library/cart.php in OpenCart 1.5.6.4 and earlier allows remote attackers to cond…
-
Unscored —
Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote att…
-
Unscored —
Deadwood before 2.3.09, 3.x before 3.2.05, and as used in MaraDNS before 1.4.14 and 2.x before 2.0.09, allow remote att…
-
Unscored —
Edger8r tool in the Intel SGX SDK before version 2.1.2 (Linux) and 1.9.6 (Windows) may generate code that is susceptibl…
-
Unscored —CVE-2018-8828 EPSS 30%
A Buffer Overflow issue was discovered in Kamailio before 4.4.7, 5.0.x before 5.0.6, and 5.1.x before 5.1.2. A speciall…
-
Unscored —
An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a …
-
Unscored —
A remote, unauthenticated attacker can gain remote code execution on the the Tenda AC15 router with a specially crafted…
-
High 8.1
openbuildservice webui code injection
In the web ui of the openbuildservice before 2.3.0 a code injection of the project rebuildtimes statistics could be used by authorized attackers to execute shellcode.
-
Unscored —
When installing Nessus to a directory outside of the default location, Nessus versions prior to 7.0.3 did not enforce s…
-
Medium 4.9
Exposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope
An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can recover sensitive security values using the fiql and orderby parameters.
-
High 7.5
Improper Input Validation Apache Commons Email
If a user of Apache Commons Email (typically an application programmer) passes unvalidated input as the so-called "Bounce Address", and that input contains line-breaks, then the email details (recipients, contents, etc.) might be manipulated. Mitigation: User…
-
High 7.2
High severity vulnerability that affects org.apache.syncope:syncope-core
An administrator with report and template entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can use XSL Transformations (XSLT) to perform malicious operations, includin…
-
Unscored —
Philips ISCV application prior to version 2.3.0 has an insufficient session expiration vulnerability where an attacker …
-
Unscored —
In Eaton ELCSoft versions 2.04.02 and prior, there are multiple cases where specially crafted files could cause a buffe…
-
Unscored —
GE Infinia/Infinia with Hawkeye 4 medical imaging systems all current versions are affected these devices use default o…
-
Unscored —
GE Xeleris versions 1.0,1.1,2.1,3.0,3.1, medical imaging systems, all current versions are affected, these devices use …
-
Unscored —
GE GEMNet License server (EchoServer) all current versions are affected these devices use default or hard-coded credent…
-
Unscored —
GE Centricity PACS RA1000, diagnostic image analysis, all current versions are affected these devices use default or ha…
-
Unscored —
An issue was discovered on Tenda AC15 devices. A remote, unauthenticated attacker can make a request to /goform/telnet,…
-
Unscored —
Huawei P9 smartphones with the versions before EVA-AL10C00B399SP02 have an information disclosure vulnerability. The so…
-
Unscored —
Some Huawei Smartphones with software of VNS-L21AUTC555B141, VNS-L21C10B160, VNS-L21C66B160, VNS-L21C703B140 have an ar…
-
Unscored —
Some Huawei Smartphones with software of VNS-L21AUTC555B141 have an out-of-bounds read vulnerability. Due to the lack s…
-
Unscored —
Huawei Mate 9 Pro smartphones with software of LON-AL00BC00B139D, LON-AL00BC00B229, LON-L29DC721B188 have a memory doub…