Archive
April 2018
Vulnerabilities first published in this month (UTC), newest first.
142 results · Clear filters · Feed
-
High 8.8
Improper Input Validation in Datomic
H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary Java code. NOTE: the vendor's position is "h2 is not designed to be run outside of a secure environment."
-
Unscored —
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR …
-
Unscored —CVE-2018-8772 Public exploit
Coship RT3052 4.0.0.48 devices allow XSS via a crafted SSID field on the "Wireless Setting - Basic" screen.
-
Unscored —CVE-2018-9038 Public exploit
Monstra CMS 3.0.4 allows remote attackers to delete files via an admin/index.php?id=filesmanager&delete_dir=./&path=upl…
-
Unscored —
The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gai…
-
Unscored —CVE-2018-9926 Public exploit
An issue was discovered in WUZHI CMS 4.1.0. There is a CSRF vulnerability that can add an admin account via index.php?m…
-
Unscored —
Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection …
-
Unscored —CVE-2018-9857 Public exploit
PHP Scripts Mall Match Clone Script 1.0.4 has XSS via the search field to searchbyid.php (aka the "View Search By Id" s…
-
Medium 4.8CVE-2018-6905 Public exploit
Typo3 XSS Vulnerability
The page module in TYPO3 before 8.7.11, and 9.1.0, has XSS via $GLOBALS['TYPO3_CONF_VARS']['SYS']['sitename'], as demonstrated by an admin entering a crafted site name during the installation process.
-
Unscored —CVE-2018-9844 Public exploit
The Iptanus WordPress File Upload plugin before 4.3.4 for WordPress mishandles Settings attributes, leading to XSS.
-
Critical 9.8
Spring Framework allows applications to expose STOMP over WebSocket endpoints
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious u…
-
Unscored —CVE-2018-4863 Public exploit
Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HK…
-
Unscored —CVE-2018-9233 Public exploit
Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\Sophos\Sophos Anti-Vi…
-
Unscored —
The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism …
-
Unscored —
The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.
-
Unscored —CVE-2016-8366 Public exploit
Webvisit in Phoenix Contact ILC PLCs offers a password macro to protect HMI pages on the PLC against casual or coincide…
-
Unscored —
An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp-content/uploads/wp-securi…
-
Unscored —CVE-2018-9034 Public exploit
Cross-site scripting (XSS) vulnerability in lib/interface.php of the Relevanssi plugin 4.0.4 for WordPress allows remot…
-
Unscored —CVE-2018-9035 Public exploit
CSV Injection vulnerability in ExportToCsvUtf8.php of the Contact Form 7 to Database Extension plugin 2.10.32 for WordP…
-
Unscored —
The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequ…
-
Unscored —CVE-2018-9115 Public exploit
Systematic SitaWare 6.4 SP2 does not validate input from other sources sufficiently. e.g., information utilizing the NV…
-
Unscored —
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a spec…
-
Unscored —CVE-2017-13261 Public exploit
In bnep_process_control_packet of bnep_utils.cc, there is a possible out of bounds read due to a missing bounds check. …
-
Unscored —CVE-2017-13260 Public exploit
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
Unscored —CVE-2017-13262 Public exploit
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing length decrement operation. T…
-
Unscored —CVE-2017-13258 Public exploit
In bnep_data_ind of bnep_main.cc, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
Unscored —CVE-2017-13253 Public exploit
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. Th…
-
Unscored —CVE-2017-13286 Public exploit
In writeToParcel and readFromParcel of OutputConfiguration.java, there is a permission bypass due to mismatched seriali…
-
Unscored —CVE-2018-8814 Public exploit
Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication…
-
Unscored —CVE-2018-8813 Public exploit
Open redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3.1 allows remote attac…
-
Unscored —
Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.
-
Unscored —
FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin" header.
-
Unscored —CVE-2018-9236 Public exploit
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site title" field.
-
Unscored —CVE-2018-9235 Public exploit
iScripts SonicBB 1.0 has Reflected Cross-Site Scripting via the query parameter to search.php.
-
Unscored —CVE-2018-9238 Public exploit
proberv.php in Yahei-PHP Proberv 0.4.7 has XSS via the funName parameter.
-
Unscored —CVE-2018-9237 Public exploit
iScripts EasyCreate 3.2.1 has Stored Cross-Site Scripting in the "Site Description" field.
-
Unscored —
Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denia…
-
Unscored —CVE-2017-18256 Public exploit
Brave Browser before 0.13.0 allows remote attackers to cause a denial of service (resource consumption) via a long aler…
-
Unscored —CVE-2018-8941 Public exploit
Diagnostics functionality on D-Link DSL-3782 devices with firmware EU v. 1.01 has a buffer overflow, allowing authentic…
-
Unscored —CVE-2018-0492 Public exploit
Johnathan Nightingale beep through 1.3.4, if setuid, has a race condition that allows local privilege escalation.