Archive
12 April 2018
Vulnerabilities first published on this day (UTC), newest first.
18 results · Clear filters · Feed
-
Unscored —CVE-2018-10063 Public exploit
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that…
-
Unscored —CVE-2018-10068 Public exploit
The jDownloads extension before 3.2.59 for Joomla! has XSS.
-
Unscored —CVE-2018-9155 Public exploit
Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary w…
-
Unscored —
The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute…
-
Unscored —
exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Direc…
-
Unscored —
CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by repla…
-
Unscored —CVE-2018-0970 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0969 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0974 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0975 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0966 Public exploit
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security …
-
Unscored —CVE-2018-0971 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —CVE-2018-0972 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0973 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —CVE-2018-0968 Public exploit
An information disclosure vulnerability exists in the Windows kernel that could allow an attacker to retrieve informati…
-
Unscored —
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedde…
-
Unscored —
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle ob…