Archive
March 2018
Vulnerabilities first published in this month (UTC), newest first.
1,339 results · Feed
-
Unscored —
A missing authentication for appliance registration vulnerability in Trend Micro Email Encryption Gateway 5.5 could all…
-
Unscored —CVE-2018-6219 Public exploit
An Insecure Update via HTTP vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to eavesd…
-
Unscored —CVE-2018-6221 Public exploit
An unvalidated software update vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow a man-in-the-middl…
-
Unscored —
A SQL injection vulnerability in a Trend Micro Email Encryption Gateway 5.5 policy script could allow an attacker to ex…
-
Unscored —CVE-2018-6220 Public exploit
An arbitrary file write vulnerability in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to inject arb…
-
Unscored —CVE-2018-6222 Public exploit
Arbitrary logs location in Trend Micro Email Encryption Gateway 5.5 could allow an attacker to change location of log f…
-
Unscored —
An issue was discovered in Exempi before 2.4.3. The PostScript_Support::ConvertToDate function in XMPFiles/source/Forma…
-
Unscored —
An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatSupport/RI…
-
Unscored —
An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in XMPFiles/source/FormatSup…
-
Unscored —
An issue was discovered in Exempi before 2.4.3. It allows remote attackers to cause a denial of service (invalid memcpy…
-
Unscored —
An issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles/source/FormatSupport/WEBP_Support.cpp do…
-
Unscored —
An issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in XMPFiles/source/Format…
-
Unscored —CVE-2018-8729 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote …
-
Unscored —
server/app/views/static/code.html in Kontena before 1.5.0 allows XSS in "kontena master login --remote" code display, a…
-
Unscored —
ServiceNow ITSM 2016-06-02 has XSS via the First Name or Last Name field of My Profile (aka navpage.do), or the Search …
-
Unscored —
Zoho ManageEngine Desktop Central version 9.1.0 build 91099 has multiple XSS issues that were fixed in build 92026.
-
Unscored —
Zoho ManageEngine EventLog Analyzer version 11.0 build 11000 has Stored XSS related to the index2.do?url=editAlertForm&…
-
Unscored —
ZenMate 1.5.4 for macOS suffers from a type confusion vulnerability within the com.zenmate.chron-xpc LaunchDaemon compo…
-
Unscored —
The Serial Attached SCSI (SAS) implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, whic…
-
Unscored —CVE-2018-7886 Public exploit
An issue was discovered in CloudMe 1.11.0. An unauthenticated local attacker that can connect to the "CloudMe Sync" cli…
-
Unscored —
A flaw was found in the way spice-client processed certain messages sent from the server. An attacker, having control o…
-
Unscored —
SecurEnvoy SecurMail before 9.2.501 allows remote attackers to spoof transmission of arbitrary e-mail messages, resend …
-
Unscored —CVE-2018-7707 Public exploit
Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbit…
-
Unscored —CVE-2018-7705 Public exploit
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-ma…
-
Unscored —
RunExeFile.exe in the installer for DEWESoft X3 SP1 (64-bit) devices does not require authentication for sessions on TC…
-
Unscored —CVE-2018-7704 Public exploit
SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via the option1…
-
Unscored —CVE-2018-7706 Public exploit
Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbi…
-
Unscored —CVE-2018-7703 Public exploit
Cross-site scripting (XSS) vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote attackers to inject arbit…
-
Unscored —CVE-2018-7701 Public exploit
Multiple cross-site request forgery (CSRF) vulnerabilities in SecurEnvoy SecurMail before 9.2.501 allow remote attacker…
-
Unscored —
In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vuln…
-
Unscored —
The Embedthis HTTP library, and Appweb versions before 7.0.3, have a logic flaw related to the authCondition function i…
-
Unscored —
joyplus-cms 1.6.0 has CSRF, as demonstrated by adding an administrator account via a manager/admin_ajax.php?action=save…
-
Unscored —
It was discovered that the Unitrends Backup (UB) before 10.1.0 user interface was exposed to an authentication bypass, …
-
Unscored —
It was discovered that the Unitrends Backup (UB) before 10.1.0 libbpext.so authentication could be bypassed with a SQL …
-
Unscored —
Under certain conditions SAP Business Process Automation (BPA) By Redwood, 9.00, 9.10, allows an attacker to access inf…
-
High 7.6
In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP Note 2362820 for more…
-
Medium 6.7
Under certain conditions SAP Business Client 6.5 allows an attacker to access information which would otherwise be rest…
-
Medium 6.1
Cross-Site Scripting in Process Monitoring Infrastructure, from 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, due to inef…
-
Medium 5.4
In SAP Business Objects Business Intelligence Platform, 4.00, 4.10, 4.20, 4.30, the Central Management Console (CMC) do…
-
Medium 5.4
SAP Business Process Automation (BPA) By Redwood does not sufficiently validate an XML document accepted from an untrus…