Archive
2 May 2018
Vulnerabilities first published on this day (UTC), newest first.
63 results · Feed
-
Unscored —
partclone.restore in Partclone 0.2.87 is prone to a heap-based buffer overflow vulnerability due to insufficient valida…
-
Unscored —
partclone.fat in Partclone before 0.2.88 is prone to a heap-based buffer overflow vulnerability due to insufficient val…
-
Unscored —
A vulnerability in Cisco Meeting Server could allow an unauthenticated, remote attacker to gain unauthorized access to …
-
Unscored —
A vulnerability in the IP Version 4 (IPv4) fragment reassembly function of Cisco 3500, 5500, and 8500 Series Wireless L…
-
Unscored —
A vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow an un…
-
Unscored —
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attac…
-
Unscored —
A vulnerability in the Cisco WebEx Network Recording Player for Advanced Recording Format (ARF) files could allow an un…
-
Unscored —
A vulnerability in the REST API of Cisco 5500 and 8500 Series Wireless LAN Controller (WLC) Software could allow an una…
-
Unscored —
A vulnerability in Cisco WebEx Recording Format (WRF) Player could allow an unauthenticated, remote attacker to access …
-
Unscored —
A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attac…
-
Unscored —CVE-2018-0258 EPSS 48%
A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker …
-
Unscored —
A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point (APs) on …
-
Unscored —
A vulnerability in the assignment and management of default user accounts for Secure Shell (SSH) access to Cisco Airone…
-
Unscored —
A vulnerability in the 802.11 frame validation functionality of the Cisco Wireless LAN Controller (WLC) could allow an …
-
Unscored —
A vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated, remote attacker to den…
-
Unscored —
A vulnerability in the implementation of Point-to-Point Tunneling Protocol (PPTP) functionality in Cisco Aironet 1810, …
-
Unscored —
A vulnerability in Central Web Authentication (CWA) with FlexConnect Access Points (APs) for Cisco Aironet 1560, 1810, …
-
Unscored —
A vulnerability in the netconf interface of Cisco IOS XR Software could allow an unauthenticated, remote attacker to ca…
-
Unscored —
A vulnerability in the ACS Report component of Cisco Secure Access Control System (ACS) could allow an unauthenticated,…
-
Unscored —
A vulnerability in Web Authentication (WebAuth) clients for the Cisco Wireless LAN Controller (WLC) and Aironet Access …
-
Unscored —
A vulnerability in the management console of Cisco Firepower System Software could allow an unauthenticated, remote att…
-
Unscored —
In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the lzma_decompress_buf function of stream.c, which a…
-
Unscored —
The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows …
-
Unscored —
A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8, which allows remote attackers to…
-
Unscored —
XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7.
-
Unscored —
An XSS in Flexense SyncBreeze affects all versions (tested from SyncBreeze Enterprise from v10.1 to v10.7).
-
Unscored —
XSS exists in Flexense DupScout Enterprise from v10.0.18 to v10.7.
-
Unscored —
Flexense DiskBoss Enterprise v7.4.28 to v9.1.16 has XSS.
-
Unscored —CVE-2018-10577 Public exploit
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices …
-
Unscored —
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices …
-
Unscored —
XSS exists in Flexense VX Search Enterprise from v10.1.12 to v10.7.
-
Unscored —
Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memo…
-
Unscored —
XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7.
-
Unscored —
XSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7.
-
Unscored —
Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a jo…
-
Unscored —
A remote code execution vulnerability exists when the Windows Host Compute Service Shim (hcsshim) library fails to prop…
-
Unscored —
The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which all…
-
Unscored —
Z-BlogPHP 1.5.2 has a stored Cross Site Scripting Vulnerability exploitable by an administrator who navigates to "Web s…
-
Unscored —
Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows f…
-
Unscored —
The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial …