7 April 2018

10 results · Feed

• Unscored —
  CVE-2018-9848

  In Gxlcms QY v1.0.0713, the upload function in Lib\Lib\Action\Admin\UploadAction.class.php allows remote attackers to e…

  Apr 7, 2018
• Unscored —
  CVE-2018-9327

  Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to execute arbitrary code on the server. The instance has to b…

  Apr 7, 2018
• Unscored —
  CVE-2018-9846

  In Roundcube from versions 1.2.0 to 1.3.5, with the archive plugin enabled and configured, it's possible to exploit the…

  roundcube roundcube roundcubemail Debian Ubuntu Alpine
  Apr 7, 2018
• Unscored —
  CVE-2018-9326

  Etherpad 1.6.3 before 1.6.4 allows an attacker to execute arbitrary code.

  Apr 7, 2018
• Unscored —
  CVE-2018-9847

  In Gxlcms QY v1.0.0713, the update function in Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to exec…

  Apr 7, 2018
• Unscored —
  CVE-2018-9325

  Etherpad 1.5.x and 1.6.x before 1.6.4 allows an attacker to export all the existing pads of an instance without knowled…

  Apr 7, 2018
• Unscored —
  CVE-2018-9330

  register.jsp in Coremail XT3.0 allows stored XSS, as demonstrated by the third form field to a URI under register/, a d…

  Apr 7, 2018
• Unscored —
  CVE-2018-9841

  The export function in libavfilter/vf_signature.c in FFmpeg through 3.4.2 allows remote attackers to cause a denial of …

  ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine
  Apr 7, 2018
• Unscored —
  CVE-2018-9844 Public exploit

  The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings attributes, leading to XSS.

  Apr 7, 2018
• Unscored —
  CVE-2018-9331

  An issue was discovered in zzcms 8.2. user/adv.php allows remote attackers to delete arbitrary files via directory trav…

  Apr 7, 2018