Skip to content
OpenAdvisories

Archive

4 April 2018

Vulnerabilities first published on this day (UTC), newest first.

← March 2018 2018 / April /4 May 2018 →
  1. 18
  2. 225
  3. 3170
  4. 4163
  5. 557
  6. 614
  7. 710
  8. 85
  9. 914
  10. 1050
  11. 1188
  12. 12112
  13. 1346
  14. 148
  15. 157
  16. 1641
  17. 1731
  18. 18282
  19. 19200
  20. 2036
  21. 2110
  22. 2210
  23. 2327
  24. 2497
  25. 2547
  26. 2636
  27. 2729
  28. 283
  29. 2915
  30. 3029
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 5.3
    CVE-2018-1081

    Moodle Unauthenticated users can trigger custom messages to admin via paypal enrol script

    A flaw was found in Moodle 3.4 to 3.4.1, 3.3 to 3.3.4, 3.2 to 3.2.7, 3.1 to 3.1.10 and earlier unsupported versions. Unauthenticated users can trigger custom messages to admin via paypal enrol script. Paypal IPN callback script should only send error emails t…

    Red Hat Moodle moodle/moodle moodle Web / CMS Ubuntu Packagist
  • Medium 5.1
    CVE-2018-1447

    The GSKit (IBM Spectrum Protect 7.1 and 7.2) and (IBM Spectrum Protect Snapshot 4.1.3, 4.1.4, and 4.1.6) CMS KDB logic …

    IBM Spectrum Protect Spectrum Protect for Virtual Environments Spectrum Protect for Space Management
  • Medium 4.0
    CVE-2017-1733

    IBM QRadar 7.3 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID…

    IBM Security QRadar SIEM
  • Medium 6.1
    CVE-2017-1772

    IBM Worklight (IBM MobileFirst Platform Foundation 6.3, 7.0, 7.1, and 8.0) is vulnerable to cross-site scripting. This …

    IBM MobileFirst Platform Foundation
  • Medium 4.2
    CVE-2017-1624

    IBM QRadar 7.3 and 7.3.1 specifies permissions for a security-critical resource in a way that allows that resource to b…

    IBM Security QRadar SIEM
  • Medium 6.4
    CVE-2017-3966

    SB10192 - Network Security Management (NSM) - Exploitation of session variables, resource IDs and other trusted credentials vulnerability

    Exploitation of session variables, resource IDs and other trusted credentials vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to exploit or harm a user's browser via reusing the exposed …

    McAfee Network Security Management (NSM)
  • Medium 6.1
    CVE-2017-3967

    SB10192 - Network Security Management (NSM) - Target influence via framing vulnerability

    Target influence via framing vulnerability in the web interface in McAfee Network Security Management (NSM) before 8.2.7.42.2 allows remote attackers to inject arbitrary web script or HTML via application pages inability to break out of 3rd party HTML frames.

    McAfee Network Security Management (NSM)