Skip to content
OpenAdvisories

Archive

9 April 2018

Vulnerabilities first published on this day (UTC), newest first.

← March 2018 2018 / April /9 May 2018 →
  1. 18
  2. 225
  3. 3170
  4. 4163
  5. 557
  6. 614
  7. 710
  8. 85
  9. 914
  10. 1050
  11. 1188
  12. 12112
  13. 1346
  14. 148
  15. 157
  16. 1641
  17. 1731
  18. 18282
  19. 19200
  20. 2036
  21. 2110
  22. 2210
  23. 2327
  24. 2497
  25. 2547
  26. 2636
  27. 2729
  28. 283
  29. 2915
  30. 3029
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • Unscored —
    CVE-2018-5463

    A structured exception handler overflow vulnerability in Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME …

    ICS-CERT LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA ME LAquis SCADA
  • Unscored —
    CVE-2018-1217 Public exploit Scanner template EPSS 51%

    Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection …

    DELL EMC Avamar, Integrated Data Protection Appliance
  • Unscored —
    CVE-2018-6182

    Mahara 16.10 before 16.10.9 and 17.04 before 17.04.7 and 17.10 before 17.10.4 are vulnerable to bad input when TinyMCE …

  • Unscored —
    CVE-2017-2826

    An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted…

    Talos Zabbix zabbix zabbix Debian Ubuntu
  • Unscored —
    CVE-2018-9864

    The WP Live Chat Support plugin before 8.0.06 for WordPress has stored XSS via the Name field.

  • Unscored —
    CVE-2018-9862

    util.c in runV 1.0.0 for Docker mishandles a numeric username, which allows attackers to obtain root access by leveragi…

  • Unscored —
    CVE-2018-0556

    Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.

    BUFFALO WZR-1750DHP2
  • Unscored —
    CVE-2018-0545

    LXR version 1.0.0 to 2.3.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors.

    LXR Project LXR
  • Unscored —
    CVE-2018-0553

    The iRemoconWiFi App for Android version 4.1.7 and earlier does not verify X.509 certificates from SSL servers, which a…

    Glamo iRemoconWiFi App for Android Android
  • Unscored —
    CVE-2018-0555

    Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a special…

    BUFFALO WZR-1750DHP2
  • Unscored —
    CVE-2018-0554

    Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on…

    BUFFALO WZR-1750DHP2
  • High 7.5
    CVE-2018-1308 EPSS 21%

    There is a XML external entity expansion (XXE) vulnerability in Apache Solr

    This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig=<inlinexml>` parameter of Solr's DataImportHandler. It can be used as XXE using file/ftp/http protocols in order to read ar…

    Apache Software Foundation Apache Solr org.apache.solr:solr-core lucene-solr Debian Ubuntu Maven
  • High 8.8
    CVE-2018-9856

    Kotti CSRF in the local roles implementation

    Kotti before 1.3.2 and 2.x before 2.0.0b2 has CSRF in the local roles implementation, as demonstrated by triggering a permission change via a /admin-document/@@share request.

    kotti PyPI
  • Unscored —
    CVE-2018-9857 Public exploit

    PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php (aka the "View Search By Id" s…