4 April 2018

163 results · Feed

• Medium 5.3
  CVE-2018-1081

  Moodle Unauthenticated users can trigger custom messages to admin via paypal enrol script

  A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails t…

  Red Hat Moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  Apr 4, 2018
• Unscored —
  CVE-2018-1097

  A flaw was found in foreman before 1.16.1. The issue allows users with limited permissions for powering oVirt/RHV hosts…

  Foreman foreman
  Apr 4, 2018
• High 8.1
  CVE-2018-1082

  Moodle Improper Authentication

  A flaw was found in Moodle 3.4 to 3.4.1, and 3.3 to 3.3.4. If a user account using OAuth2 authentication method was once confirmed but later suspended, the user could still login to the site.

  Red Hat Moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  Apr 4, 2018
• Unscored —
  CVE-2018-9303

  In Exiv2 0.26, an assertion failure in BigTiffImage::readData in bigtiffimage.cpp results in an abort.

  Apr 4, 2018
• Unscored —
  CVE-2018-9304

  In Exiv2 0.26, a divide by zero in BigTiffImage::printIFD in bigtiffimage.cpp could result in denial of service.

  Apr 4, 2018
• Unscored —
  CVE-2018-9305

  In Exiv2 0.26, an out-of-bounds read in IptcData::printStructure in iptc.c could result in a crash or information leak,…

  Apr 4, 2018
• Unscored —
  CVE-2018-9307

  dsmall v20180320 allows XSS via the pdr_sn parameter to public/index.php/home/predeposit/index.html.

  Apr 4, 2018
• Critical 9.1
  CVE-2018-1002150

  Koji hub call does not perform correct access checks

  Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access. This vulnerability has been fixed in versions 1.12.1, 1.13.1, 1.14.1 and 1.15.1.

  koji koji Ubuntu PyPI
  Apr 4, 2018
• Unscored —
  CVE-2018-8719 Public exploit Scanner template EPSS 16%

  An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp-content/uploads/wp-securi…

  Apr 4, 2018
• Unscored —
  CVE-2018-9034 Public exploit

  Cross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remot…

  Apr 4, 2018
• Unscored —
  CVE-2018-9035 Public exploit

  CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordP…

  Apr 4, 2018
• Unscored —
  CVE-2018-9284

  authentication.cgi on D-Link DIR-868L devices with Singapore StarHub firmware before v1.21SHCb03 allows remote attacker…

  Apr 4, 2018
• Unscored —
  CVE-2018-9126 Public exploit EPSS 49%

  The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequ…

  Apr 4, 2018
• Unscored —
  CVE-2018-9115 Public exploit

  Systematic SitaWare 6.4 SP2 does not validate input from other sources sufficiently. e.g., information utilizing the NV…

  Apr 4, 2018
• Unscored —
  CVE-2018-9285

  Main_Analysis_Content.asp in /apply.cgi on ASUS RT-AC66U, RT-AC68U, RT-AC86U, RT-AC88U, RT-AC1900, RT-AC2900, and RT-AC…

  Apr 4, 2018
• Unscored —
  CVE-2015-9012

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2015-9014

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2015-9008

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2015-9009

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2015-9010

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2015-9015

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2015-9013

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2015-9011

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• High 7.1
  CVE-2018-1421

  IBM WebSphere DataPower Appliances 7.1, 7.2, 7.5, 7.5.1, 7.5.2, and 7.6 is vulnerable to a XML External Entity Injectio…

  IBM DataPower Gateways
  Apr 4, 2018
• Medium 5.1
  CVE-2018-1447

  The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic …

  IBM Spectrum Protect Spectrum Protect for Virtual Environments Spectrum Protect for Space Management
  Apr 4, 2018
• Critical 9.8
  CVE-2018-1469

  IBM API Connect Developer Portal 5.0.0.0 through 5.0.8.2 could allow an unauthenticated attacker to execute system comm…

  IBM API Connect
  Apr 4, 2018
• Unscored —
  CVE-2018-9275

  In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25, successful logins can leak f…

  yubico-pam yubico-pam Debian Ubuntu
  Apr 4, 2018
• Unscored —
  CVE-2014-9953

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2014-9954

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2014-9959

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2014-9955

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2014-9956

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2014-9958

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2014-9957

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2016-8486

  An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2016-8485

  An information disclosure vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2016-8488

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2016-8484

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Google Android Android
  Apr 4, 2018
• Unscored —
  CVE-2016-8487

  An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…

  Apr 4, 2018
• Unscored —
  CVE-2016-10236

  An information disclosure vulnerability in the Qualcomm USB driver. Product: Android. Versions: Android kernel. Android…

  Google Android Android
  Apr 4, 2018