Skip to content
OpenAdvisories

Archive

24 March 2018

Vulnerabilities first published on this day (UTC), newest first.

← February 2018 2018 / March /24 April 2018 →
  1. 153
  2. 246
  3. 3 
  4. 412
  5. 551
  6. 658
  7. 724
  8. 859
  9. 9104
  10. 104
  11. 115
  12. 1247
  13. 1372
  14. 14144
  15. 1553
  16. 1642
  17. 173
  18. 189
  19. 1930
  20. 2061
  21. 2132
  22. 2267
  23. 2329
  24. 2413
  25. 2535
  26. 2651
  27. 2766
  28. 2856
  29. 2933
  30. 3071
  31. 319
All Critical High Medium Low Exploited only Public exploit

13 results · Feed

  • Unscored —
    CVE-2018-8973

    OTCMS 3.20 allows XSS by adding a keyword or link to an article, as demonstrated by an admin/keyWord_deal.php?mudi=add …

  • Unscored —
    CVE-2018-8972

    Creditwest Bank CMS Project (aka CWCMS) through 2017-07-28 has CSRF in the functionality for updating the site configur…

  • Unscored —
    CVE-2018-8971

    The Auth0 integration in GitLab before 10.3.9, 10.4.x before 10.4.6, and 10.5.x before 10.5.6 has an incorrect omniauth…

    gitlab Ubuntu
  • Unscored —
    CVE-2018-8970 Public exploit

    The int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2.7.1 does not support …

  • Unscored —
    CVE-2015-9257

    BMC Remedy Action Request (AR) System 9.0 before 9.0.00 Service Pack 2 hot fix 1 has persistent XSS.

  • Unscored —
    CVE-2018-8966

    An issue was discovered in zzcms 8.2. It allows PHP code injection via the siteurl parameter to install/index.php, as d…

  • Unscored —
    CVE-2018-8969

    An issue was discovered in zzcms 8.2. user/licence_save.php allows remote attackers to delete arbitrary files via direc…

  • Unscored —
    CVE-2018-8968

    An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory t…

  • Unscored —
    CVE-2018-8967

    An issue was discovered in zzcms 8.2. It allows SQL injection via the id parameter in an adv2.php?action=modify request.

  • Unscored —
    CVE-2018-8965

    An issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary files via directory t…

  • Unscored —
    CVE-2017-17751

    Bose SoundTouch devices allows remote attackers to achieve remote control via a crafted web site that uses the WebSocke…

  • Unscored —
    CVE-2017-17749

    Bose SoundTouch devices allow XSS via crafted song data from a music service, as demonstrated by Pandora.

  • Unscored —
    CVE-2017-17750

    Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify.