Skip to content
OpenAdvisories

Archive

1 May 2018

Vulnerabilities first published on this day (UTC), newest first.

12 results · Clear filters · Feed

  • Unscored —
    CVE-2018-6242 Public exploit

    Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery …

  • Unscored —
    CVE-2018-10259 Public exploit

    An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged …

  • Unscored —
    CVE-2018-10256 Public exploit

    A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privil…

  • Unscored —
    CVE-2018-10257 Public exploit

    A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privil…

  • Unscored —
    CVE-2018-10255 Public exploit

    A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level pr…

  • Unscored —
    CVE-2018-10258 Public exploit

    A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges t…

  • Unscored —
    CVE-2018-10260 Public exploit

    A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user.

  • Unscored —
    CVE-2016-10036 Public exploit EPSS 25%

    Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers t…

  • Unscored —
    CVE-2018-10583 Public exploit EPSS 78%

    An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically …

  • Unscored —
    CVE-2018-10365 Public exploit

    An XSS issue was discovered in the Threads to Link plugin 1.3 for MyBB. When editing a thread, the user is given the op…

  • Unscored —
    CVE-2017-17020 Public exploit EPSS 15%

    On D-Link DCS-5009 devices with firmware 1.08.11 and earlier, DCS-5010 devices with firmware 1.14.09 and earlier, and D…

  • Unscored —
    CVE-2018-10371 Public exploit

    An issue was discovered in the wunderfarm WF Cookie Consent plugin 1.1.3 for WordPress. A persistent cross-site scripti…