Archive
5 April 2018
Vulnerabilities first published on this day (UTC), newest first.
57 results · Feed
-
Unscored —
An input sanitization flaw was found in the id field in the dashboard controller of Foreman before 1.16.1. A user could…
-
High 8.6
An exploitable denial of service vulnerability exists in the Ethernet functionality of the Allen Bradley Micrologix 140…
-
High 7.7
An exploitable denial of service vulnerability exists in the processing of snmp-set commands of the Allen Bradley Micro…
-
Medium 5.3
An exploitable insufficient resource pool vulnerability exists in the session communication functionality of Allen Brad…
-
High 8.6
An exploitable denial of service vulnerability exists in the program download functionality of Allen Bradley Micrologix…
-
Critical 10.0CVE-2017-14464 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14473 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14466 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14462 EPSS 35%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14467 EPSS 37%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14463 EPSS 39%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14470 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14471 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14472 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14465 EPSS 35%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14468 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Critical 10.0CVE-2017-14469 EPSS 38%
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of…
-
Unscored —
PHP Scripts Mall Redbus Clone Script 3.0.6 has XSS via the ter_from or tag parameter to results.php.
-
Medium 6.5
An exploitable vulnerability exists in the WiFi Access Point feature of Circle with Disney running firmware 2.0.1. A se…
-
Critical 9.0
An exploitable code execution vulnerability exists in the SavePatientMontage functionality of Natus Xltek NeuroWorks 8.…
-
Critical 10.0
An exploitable code execution vulnerability exists in the NewProducerStream functionality of Natus Xltek NeuroWorks 8. …
-
Critical 10.0
An exploitable code execution vulnerability exists in the OpenProducer functionality of Natus Xltek NeuroWorks 8. A spe…
-
High 7.5
An exploitable Denial of Service vulnerability exists in the use of a return value in the NewProducerStream command in …
-
Critical 10.0
An exploitable Code Execution vulnerability exists in the RequestForPatientInfoEEGfile functionality of Natus Xltek Neu…
-
Unscored —
In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA GPU driver. Product: Android. Versions: Android kernel. Android I…
-
Unscored —
An elevation of privilege vulnerability in the NVIDIA firmware processing code. Product: Android. Versions: Android ker…
-
Unscored —
An elevation of privilege vulnerability in the Qualcomm QCE driver. Product: Android. Versions: Android kernel. Android…
-
Unscored —
An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kerne…
-
Unscored —
An information disclosure vulnerability in the Qualcomm audio driver. Product: Android. Versions: Android Kernel. Andro…
-
Unscored —CVE-2018-4863 Public exploit
Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HK…
-
Unscored —CVE-2018-9233 Public exploit
Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\Sophos\Sophos Anti-Vi…
-
Unscored —
The MySQL server in Juniper Networks Junos Space before 13.3R1.8 has an unspecified account with a hardcoded password, …
-
Unscored —
Buffer overflow in ETWS processing module Intel XMM71xx, XMM72xx, XMM73xx, XMM74xx and Sofia 3G/R allows remote attacke…
-
Unscored —
The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism …
-
Unscored —
The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.
-
Unscored —CVE-2016-8366 Public exploit
Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincide…
-
Medium 5.4
Gleez CMS Stored XSS
Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML content in an editor, which will result in Stored XSS when an Administrator tries to edit the same content, as demonstrated …
-
Unscored —
GitLab Community and Enterprise Editions version 9.2 up to 10.4 are vulnerable to XSS because a lack of input validatio…
-
Unscored —
GitLab Community and Enterprise Editions version 8.4 up to 10.4 are vulnerable to XSS because a lack of input validatio…