Skip to content
OpenAdvisories

Archive

24 April 2018

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Medium 6.6
    CVE-2016-9587 Public exploit EPSS 17%

    Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems

    Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems. An attacker with control over a client system being managed by Ansible and the ability to send facts back to the Ansible…

  • Unscored —
    CVE-2017-7651 Public exploit

    In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of co…

  • Unscored —
    CVE-2018-10321 Public exploit

    Frog CMS 0.9.5 has a stored Cross Site Scripting Vulnerability via "Admin Site title" in Settings.

  • Unscored —
    CVE-2018-10309 Public exploit

    The Responsive Cookie Consent plugin before 1.8 for WordPress mishandles number fields, leading to XSS.

  • Unscored —
    CVE-2018-10311 Public exploit

    A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbit…

  • Unscored —
    CVE-2018-10313 Public exploit

    WUZHI CMS 4.1.0 allows persistent XSS via the form%5Bqq_10%5D parameter to the /index.php?m=member&f=index&v=profile&se…

  • Unscored —
    CVE-2018-10312 Public exploit

    index.php?m=member&v=pw_reset in WUZHI CMS 4.1.0 allows CSRF to change the password of a common member.