Archive
20 April 2018
Vulnerabilities first published on this day (UTC), newest first.
36 results · Feed
-
Unscored —CVE-2018-7747 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in the Caldera Forms plugin before 1.6.0-rc.1 for WordPress allow r…
-
Unscored —
Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code…
-
Unscored —
Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upl…
-
Unscored —
Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue.
-
Unscored —CVE-2018-10079 Public exploit
Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local user…
-
Unscored —
Digital Guardian Management Console 7.1.2.0015 has an XXE issue.
-
Unscored —
Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files v…
-
Unscored —CVE-2018-10078 Public exploit
Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to …
-
Unscored —CVE-2018-10077 Public exploit
XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to r…
-
Unscored —
The Device Administrator code in Android before 4.4.1_r1 might allow attackers to spoof device administrators and conse…
-
Unscored —
The ActiveMQ admin user interface in IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allo…
-
Unscored —
Multiple XML external entity (XXE) vulnerabilities in (1) CQWeb / CM Server, (2) ClearQuest Native client, (3) ClearQue…
-
Unscored —
Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM Server, (2) Perl CC/CQ integration t…
-
Unscored —
IBM Sterling B2B Integrator 5.1 and 5.2 and Sterling File Gateway 2.1 and 2.2 allow remote attackers to obtain sensitiv…
-
Medium 4.3
IBM Power Hardware Management Console cross-site scripting
IBM Power HMC 7.1.0 through 7.8.0 and 7.3.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a…
-
Unscored —
In the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can pass database logic check…
-
Unscored —
ASUS RT-AC51U, RT-AC58U, RT-AC66U, RT-AC1750, RT-ACRH13, and RT-N12 D1 routers with firmware before 3.0.0.4.380.8228; R…
-
Unscored —
IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors rela…
-
Unscored —
IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS…
-
Unscored —
IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS…
-
Unscored —
IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS…
-
Unscored —
IBM Tivoli Identity Manager 5.1.x before 5.1.0.15-ISS-TIM-IF0057 and Security Identity Manager 6.0.x before 6.0.0.4-ISS…
-
Unscored —
The create_response function in server/server.c in Psensor before 1.1.4 allows Directory Traversal because it lacks a c…
-
Unscored —
baijiacms V3 has CSRF via index.php?mod=site&op=edituser&name=manager&do=user to add an administrator account.
-
Unscored —
Eclipse XML parser for the Eclipse IDE versions 2017.2.5 and earlier was found vulnerable to an XML External Entity att…
-
Unscored —
Within the 'getReportType' method in Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, a hac…
-
Unscored —
In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, Using a single quotation escap…
-
Unscored —
Apache Fineract 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating exposes different REST end points to query …
-
Unscored —
In Apache Fineract versions 1.0.0, 0.6.0-incubating, 0.5.0-incubating, 0.4.0-incubating, the system exposes different R…
-
Unscored —
iCMS V7.0.8 has XSS via the admincp.php keywords parameter in a weixin_category action, aka a WeChat Classified Managem…
-
Unscored —CVE-2018-10245 Scanner template
A Full Path Disclosure vulnerability in AWStats through 7.6 allows remote attackers to know where the config file is al…
-
Unscored —
An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can delete any article via index.php?m=c…
-
Unscored —
Session fixation vulnerability in EC-CUBE (EC-CUBE 3.0.0, EC-CUBE 3.0.1, EC-CUBE 3.0.2, EC-CUBE 3.0.3, EC-CUBE 3..4, EC…
-
Unscored —
VMware Horizon DaaS (7.x before 8.0.0) contains a broken authentication vulnerability that may allow an attacker to byp…
-
Unscored —
An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11. It is possible …
-
Unscored —
bvlc.c in skarg BACnet Protocol Stack bacserv 0.9.1 and 0.8.5 is affected by a Buffer Overflow because of a lack of pac…