Archive
19 April 2018
Vulnerabilities first published on this day (UTC), newest first.
200 results · Feed
-
Unscored —
A vulnerability in the web framework of the Cisco Digital Network Architecture Center (DNA Center) could allow an unaut…
-
Unscored —
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, local attack…
-
Unscored —
A vulnerability in the file type detection mechanism of the Cisco Advanced Malware Protection (AMP) for Endpoints macOS…
-
Unscored —
A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer (SSL) VPN porta…
-
Unscored —
A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance (ASA) could allow an un…
-
Unscored —
A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthe…
-
Unscored —
A vulnerability in the peer-to-peer message processing functionality of Cisco Packet Data Network Gateway could allow a…
-
Unscored —
A vulnerability in the Secure Sockets Layer (SSL) packet reassembly functionality of the detection engine in Cisco Fire…
-
Unscored —
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attac…
-
Unscored —
A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and C…
-
Unscored —
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attac…
-
Unscored —
A vulnerability in the web-based management interface of Cisco MATE Collector could allow an unauthenticated, remote at…
-
Unscored —
A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allo…
-
Unscored —
A vulnerability in the Secure Sockets Layer (SSL) Engine of Cisco Firepower System Software could allow an unauthentica…
-
Unscored —
A vulnerability in Cisco WebEx Connect IM could allow an unauthenticated, remote attacker to conduct a cross-site scrip…
-
Unscored —
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attac…
-
Unscored —
A vulnerability in the device manager web interface of Cisco Industrial Ethernet Switches could allow an unauthenticate…
-
Unscored —
A vulnerability in the Secure Sockets Layer (SSL) Virtual Private Network (VPN) Client Certificate Authentication featu…
-
Unscored —
A vulnerability in the support tunnel feature of Cisco Identity Services Engine (ISE) could allow an authenticated, loc…
-
Unscored —CVE-2018-0239 Public exploit
A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregatio…
-
Unscored —
A vulnerability in the role-based resource checking functionality of the Cisco Unified Computing System (UCS) Director …
-
Unscored —
A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense (FTD) Software for Ci…
-
Unscored —
A vulnerability in the UDP broadcast forwarding function of Cisco IOS XR Software could allow an unauthenticated, adjac…
-
Unscored —
A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attac…
-
Unscored —
Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance (ASA…
-
Unscored —
A vulnerability in the web interface of Cisco MATE Live could allow an unauthenticated, remote attacker to view and dow…
-
Unscored —
A vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers an…
-
Unscored —
A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication …
-
Unscored —
A vulnerability in the WebVPN web-based management interface of Cisco Adaptive Security Appliance could allow an unauth…
-
High 8.8
An exploitable use of an uninitialized pointer vulnerability exists in the JavaScript engine in Foxit PDF Reader versio…
-
Medium 6.5CVE-2018-3843 EPSS 22%
An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with ass…
-
Unscored —
POSCMS 3.2.18 allows remote attackers to execute arbitrary PHP code via the diy\dayrui\controllers\admin\Syscontroller.…
-
Unscored —
POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\module\member\controllers\admin\Setting…
-
Medium 6.1
Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)
Cross-site scripting (XSS) vulnerability in the Enhanced Image (aka image2) plugin for CKEditor (in versions 4.5.10 through 4.9.1; fixed in 4.9.2), as used in Drupal 8 before 8.4.7 and 8.5.x before 8.5.2 and other products, allows remote attackers to inject a…
-
Unscored —
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Interne…
-
Unscored —CVE-2018-10230 Scanner template
Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455.
-
Unscored —
Huawei AR1200 V200R006C10SPC300, AR160 V200R006C10SPC300, AR200 V200R006C10SPC300, AR2200 V200R006C10SPC300, AR3200 V20…
-
Unscored —
The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105(C00), 8.0.0.…
-
High 8.8CVE-2018-10188 Public exploit
phpMyAdmin CSRF vulnerability allowing arbitrary SQL execution
phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js, libraries/classes/Operations.php, and sql.php.
-
Unscored —
Electronic Numbers to URI Mapping (ENUM) module in some Huawei products DP300 V500R002C00, RP200 V600R006C00, TE30 V100…