Skip to content
OpenAdvisories

Archive

5 April 2018

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2018-4863 Public exploit

    Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HK…

  • Unscored —
    CVE-2018-9233 Public exploit

    Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\Sophos\Sophos Anti-Vi…

  • Unscored —
    CVE-2016-8371 Public exploit EPSS 11%

    The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism …

  • Unscored —
    CVE-2016-8380 Public exploit EPSS 11%

    The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.

  • Unscored —
    CVE-2016-8366 Public exploit

    Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincide…