Archive
4 April 2018
Vulnerabilities first published on this day (UTC), newest first.
22 results · Clear filters · Feed
-
Unscored —
An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp-content/uploads/wp-securi…
-
Unscored —CVE-2018-9034 Public exploit
Cross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remot…
-
Unscored —CVE-2018-9035 Public exploit
CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordP…
-
Unscored —
The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequ…
-
Unscored —CVE-2018-9115 Public exploit
Systematic SitaWare 6.4 SP2 does not validate input from other sources sufficiently. e.g., information utilizing the NV…
-
Unscored —
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a spec…
-
Unscored —CVE-2017-13261 Public exploit
In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. …
-
Unscored —CVE-2017-13260 Public exploit
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
Unscored —CVE-2017-13262 Public exploit
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. T…
-
Unscored —CVE-2017-13258 Public exploit
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
Unscored —CVE-2017-13253 Public exploit
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. Th…
-
Unscored —CVE-2017-13286 Public exploit
In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched seriali…
-
Unscored —CVE-2018-8814 Public exploit
Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication…
-
Unscored —CVE-2018-8813 Public exploit
Open redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3.1 allows remote attac…
-
Unscored —
Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.
-
Unscored —
FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin" header.
-
Unscored —CVE-2018-9236 Public exploit
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field.
-
Unscored —CVE-2018-9235 Public exploit
iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php.
-
Unscored —CVE-2018-9238 Public exploit
proberv.php in Yahei-PHP Proberv 0.4.7 has XSS via the funName parameter.
-
Unscored —CVE-2018-9237 Public exploit
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field.
-
Unscored —
Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denia…
-
Unscored —CVE-2017-18256 Public exploit
Brave Browser before 0.13.0 allows remote attackers to cause a denial of service (resource consumption) via a long aler…