22 April 2018

10 results · Feed

• Unscored —
  CVE-2018-10298

  Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_port…

  Apr 22, 2018
• Unscored —
  CVE-2018-10297

  Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of I…

  Apr 22, 2018
• Unscored —
  CVE-2017-17902

  SQL Injection exists in Kliqqi CMS 3.5.2 via the randkey parameter of a new story at the pligg/story.php?title= URI.

  Apr 22, 2018
• Unscored —
  CVE-2017-17889

  Kliqqi CMS 3.5.2 has XSS via a crafted group name in pligg/groups.php, a crafted Homepage string in a profile, or a cra…

  Apr 22, 2018
• Unscored —
  CVE-2018-10295

  ChemCMS v1.0.6 has CSRF by using public/admin/user/addpost.html to add an administrator account.

  Apr 22, 2018
• Unscored —
  CVE-2018-10296

  MiniCMS V1.10 has XSS via the mc-admin/post-edit.php title parameter.

  Apr 22, 2018
• Unscored —
  CVE-2018-9245 Public exploit

  The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fields that …

  Apr 22, 2018
• Unscored —
  CVE-2018-10286 Public exploit

  The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and t…

  Apr 22, 2018
• Unscored —
  CVE-2018-10285 Public exploit EPSS 13%

  The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms. Since the app does not use an…

  Apr 22, 2018
• Unscored —
  CVE-2018-10289

  In MuPDF 1.13.0, there is an infinite loop in the fz_skip_space function of the pdf/pdf-xref.c file. A remote adversary…

  mupdf mupdf Debian Ubuntu
  Apr 22, 2018