Archive
13 April 2018
Vulnerabilities first published on this day (UTC), newest first.
6 results · Clear filters · Feed
-
Unscored —CVE-2018-10097 Public exploit
XSS exists in Domain Trader 2.5.3 via the recoverlogin.php email_address parameter.
-
Unscored —
Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathnam…
-
Unscored —
plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gamin…
-
Unscored —
Parameters injection in SyntaxHighlight results in multiple vulnerabilities
Parameters injection in the SyntaxHighlight extension of Mediawiki before 1.23.16, 1.27.3 and 1.28.2 might result in multiple vulnerabilities.
-
High 7.8CVE-2017-0358 Public exploit
ntfs-3g: Modprobe influence vulnerability via environment variables
Jann Horn of Google Project Zero discovered that NTFS-3G, a read-write NTFS driver for FUSE, does not scrub the environment before executing modprobe with elevated privileges. A local user can take advantage of this flaw for local root privilege escalation.
-
Unscored —
On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Managem…