Archive
24 April 2018
Vulnerabilities first published on this day (UTC), newest first.
7 results · Clear filters · Feed
-
Medium 6.6
Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible…
-
Unscored —CVE-2017-7651 Public exploit
In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of co…
-
Unscored —CVE-2018-10321 Public exploit
Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.
-
Unscored —CVE-2018-10309 Public exploit
The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS.
-
Unscored —CVE-2018-10311 Public exploit
A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbit…
-
Unscored —CVE-2018-10313 Public exploit
WUZHI CMS 4.1.0 allows persistent XSS via the form%5Bqq_10%5D parameter to the /index.php?m=member&f=index&v=profile&se…
-
Unscored —CVE-2018-10312 Public exploit
index.php?m=member&v=pw_reset in WUZHI CMS 4.1.0 allows CSRF to change the password of a common member.