Archive
21 March 2018
Vulnerabilities first published on this day (UTC), newest first.
32 results · Feed
-
Unscored —
A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and…
-
Unscored —
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a double free vulnerability.
-
Unscored —
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a stack-based buffer overflow.
-
Unscored —
In Omron CX-Supervisor Versions 3.30 and prior, use after free vulnerabilities can be exploited when CX Supervisor pars…
-
Unscored —
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause a heap-based buffer overflow.
-
Unscored —
In Omron CX-Supervisor Versions 3.30 and prior, parsing malformed project files may cause an out of bounds vulnerabilit…
-
Unscored —
In Omron CX-Supervisor Versions 3.30 and prior, access of uninitialized pointer vulnerabilities can be exploited when C…
-
Unscored —
In Omron CX-Supervisor Versions 3.30 and prior, processing a malformed packet by a certain executable may cause an untr…
-
Unscored —
Pivotal Spring Batch Admin, all versions, does not contain cross site request forgery protection. A remote unauthentica…
-
Medium 6.1
Cross-site Scripting in Pivotal Spring Batch Admin
Pivotal Spring Batch Admin, all versions, contains a stored XSS vulnerability in the file upload feature. An unauthenticated malicious user with network access to Spring Batch Admin could store an arbitrary web script that would be executed by other users. Th…
-
Unscored —
Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project impo…
-
Unscored —
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the CI job component resulting in …
-
Unscored —
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the Oauth sign-in component r…
-
Unscored —
Gitlab Community and Enterprise Editions version 10.1, 10.2, and 10.2.4 are vulnerable to a SQL injection in the Milest…
-
Unscored —
Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulti…
-
Unscored —
Gitlab Enterprise Edition version 10.3 is vulnerable to an authorization bypass issue in the GitLab Projects::BoardsCon…
-
Unscored —
Gitlab Community Edition version 10.3 is vulnerable to a lack of input validation in the system_hook_push queue through…
-
Unscored —
Gitlab Enterprise Edition version 10.1.0 is vulnerable to an insufficiently protected credential issue in the project s…
-
Unscored —
Gitlab Community Edition version 10.3 is vulnerable to an improper authorization issue in the deployment keys component…
-
Unscored —
Gitlab Community Edition version 10.2.4 is vulnerable to a lack of input validation in the GitlabProjectsImportService …
-
Unscored —
Gitlab Community Edition version 9.1 is vulnerable to lack of input validation in the IPython notebooks component resul…
-
Unscored —
Gitlab Community Edition version 10.2.4 is vulnerable to lack of input validation in the labels component resulting in …
-
Critical 9.8
Yii SQL injection vulnerability
The findByCondition function in framework/db/ActiveRecord.php in Yii 2.x before 2.0.15 allows remote attackers to conduct SQL injection attacks via a findOne() or findAll() call, unless a developer recognizes an undocumented need to sanitize array input.
-
High 8.1
Yii Framework Code Injection
Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunction with the Elasticsearch extension.
-
Critical 9.8
yii2-redis Potential Remote code execution
Yii 2.x before 2.0.15 allows remote attackers to execute arbitrary LUA code via a variant of the CVE-2018-7269 attack in conjunction with the Redis extension.
-
Unscored —
This module enables you to retrieve image metadata and use them in fields or title. The module doesn't sufficiently res…
-
Unscored —
This module provides a JSON API standards-compliant API for accessing and manipulating Drupal content and configuration…
-
Unscored —
fs/f2fs/segment.c in the Linux kernel before 4.13 allows local users to cause a denial of service (NULL pointer derefer…
-
Low 3.1
NetIQ eDirectory Denial of Service
Addresses denial of service attack to eDirectory versions prior to 9.1.
-
Medium 5.3
NetIQ iManager, versions prior to 3.1, reflected XSS issue
The administrative web interface in NetIQ iManager, versions prior to 3.1, are vulnerable to reflected cross site scripting.
-
Medium 5.9
iManager elevation of privilege
NetIQ iManager, versions prior to 3.1, under some circumstances could be susceptible to an elevation of privilege attack.
-
Low 3.1
NetIQ iManager Communication Downgrade Attack
Addresses potential communication downgrade attack in NetIQ iManager versions prior to 3.1