Archive
22 March 2018
Vulnerabilities first published on this day (UTC), newest first.
67 results · Feed
-
Unscored —
Untrusted search path vulnerability in ViX version 2.21.148.0 allows an attacker to gain privileges via a Trojan horse …
-
Unscored —
Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via…
-
Unscored —
Buffer overflow in Tiny FTP Daemon Ver0.52d allows an attacker to cause a denial-of-service (DoS) condition or execute …
-
Unscored —
QQQ SYSTEMS version 2.24 allows an attacker to execute arbitrary commands via unspecified vectors.
-
Unscored —
Cross-site scripting vulnerability in ArsenoL Version 0.5 allows an attacker to inject arbitrary web script or HTML via…
-
Unscored —
Directory traversal vulnerability in WebProxy version 1.7.8 allows an attacker to read arbitrary files via unspecified …
-
Unscored —
In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 (the fixed version for 4.13.0 through…
-
Unscored —
Various resources in Atlassian Fisheye and Crucible before version 4.4.3 (the fixed version for 4.4.x) and 4.5.0 allow …
-
Medium 6.2
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) uses weaker than expected cryptographic algor…
-
High 7.7
IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1 (includes DB2 Connect Server) contains a vulnerability th…
-
Medium 6.2
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) contains several environment variables that a…
-
High 7.4
IBM GSKit (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) duplicates the PRNG state across fork() syste…
-
Medium 5.3
IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error message…
-
Critical 9.8
IBM Tivoli Monitoring V6 6.2.3 and 6.3.0 could allow an unauthenticated user to remotely execute code through unspecifi…
-
Medium 5.1
IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 uses weaker than expected c…
-
High 7.4
IBM Data Server Driver for JDBC and SQLJ (IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5, and 11.1) deserializes t…
-
Medium 5.3
IBM WebSphere Application Server 9 installations using Form Login could allow a remote attacker to conduct spoofing att…
-
Unscored —
The Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside of the downloads dire…
-
Unscored —
IdentityServer IdentityServer4 1.x before 1.5.3 and 2.x before 2.1.3 does not encode the redirect URI on the authorizat…
-
Unscored —
Improper input sanitization within the restricted administration shell on UCOPIA Wireless Appliance devices before 4.4.…
-
Unscored —
In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users…
-
Unscored —
In 2345 Security Guard 3.6, the driver file (2345DumpBlock.sys) allows local users to cause a denial of service (BSOD) …
-
Unscored —
In 2345 Security Guard 3.6, the driver file (2345DumpBlock.sys) allows local users to cause a denial of service (BSOD) …
-
Unscored —
dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is misha…
-
Unscored —
In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF f…
-
Unscored —
In 2345 Security Guard 3.6, the driver file (2345BdPcSafe.sys) allows local users to cause a denial of service (BSOD) o…
-
Unscored —CVE-2014-4912 Public exploit
An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation.