Skip to content
OpenAdvisories

Archive

27 March 2018

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Unscored —
    CVE-2018-9092 Public exploit

    There is a CSRF vulnerability in mc-admin/conf.php in MiniCMS 1.10 that can change the administrator account password.

  • High 8.0
    CVE-2018-8718 Public exploit

    Cross-Site Request Forgery in Jenkins Mailer Plugin

    Cross-site request forgery (CSRF) vulnerability in the Mailer Plugin 1.20 for Jenkins 2.111 allows remote authenticated users to send unauthorized mail as an arbitrary user via a /descriptorByName/hudson.tasks.Mailer/sendTestMail request.

  • Unscored —
    CVE-2018-0202 Public exploit

    clamscan in ClamAV before 0.99.4 contains a vulnerability that could allow an unauthenticated, remote attacker to cause…

  • Unscored —
    CVE-2018-9032 Public exploit EPSS 28%

    An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router (Hardware Vers…