Archive
9 May 2018
Vulnerabilities first published on this day (UTC), newest first.
105 results · Feed
-
Unscored —
In Silex SX-500 all versions and GE MobileLink(GEH-500) version 1.54 and prior, authentication is not verified when mak…
-
Unscored —
Silex SD-320AN version 2.01 and prior and GE MobileLink(GEH-SD-320AN) version GEH-1.1 and prior have a system call para…
-
Unscored —
In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker may be able to capture firmware updates through the adjac…
-
Unscored —
This module adds a new formatter for the file fields, which allows any file extension to be uploaded. The module doesn'…
-
Medium 5.3
Under certain conditions, the SAP Identity Management 8.0 (pass of type ToASCII) allows an attacker to access informati…
-
Medium 4.7
SAP NetWeaver Application Server Java Web Container and HTTP Service (Engine API, from 7.10 to 7.11, 7.30, 7.31, 7.40, …
-
Medium 6.5
SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including s…
-
Medium 5.3
SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitima…
-
Unscored —
SAP Identity Management 7.2 and 8.0 do not sufficiently validate an XML document accepted from an untrusted source.
-
Medium 5.5
SAP MaxDB ODBC driver (all versions before 7.9.09.07) allows an attacker to inject code that can be executed by the app…
-
Medium 5.3
SAP Internet Graphics Server (IGS) Portwatcher, 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to prevent legitima…
-
Medium 5.3
SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, HTTP and RFC listener allows an attacker to preven…
-
Low 3.7
SAP Enterprise Financial Services (SAPSCORE 1.11, 1.12; S4CORE 1.01, 1.02; EA-FINSERV 6.04, 6.05, 6.06, 6.16, 6.17, 6.1…
-
Critical 9.8
In the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (…
-
Critical 9.8
In the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (…
-
Critical 9.8
In the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1…
-
Critical 9.8
In the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1…
-
Critical 9.8
In the MMM::Agent::Helpers::_execute function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1, a speci…
-
Critical 9.8
In the MMM::Agent::Helpers::Network::add_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1 (…
-
Critical 9.8
In the MMM::Agent::Helpers::Network::clear_ip function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1…
-
Critical 9.8
In the MMM::Agent::Helpers::Network::send_arp function in MySQL Multi-Master Replication Manager (MMM) mmm_agentd 2.2.1…
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…
-
High 7.5CVE-2018-0954 EPSS 15%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft…
-
Unscored —
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
High 7.5CVE-2018-0943 EPSS 16%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —CVE-2018-0959 Public exploit
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input fro…
-
Unscored —
A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate vSMB pack…
-
Unscored —
A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Wi…
-
High 7.5CVE-2018-0945 EPSS 16%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…
-
Unscored —CVE-2018-0955 EPSS 16%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet…
-
High 7.5
Denial of service vulnerability exists when .NET and .NET Core improperly process XML documents
A denial of service vulnerability exists when .NET and .NET Core improperly process XML documents, aka ".NET and .NET Core Denial of Service Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework 4.7.…
-
Unscored —CVE-2018-0951 EPSS 16%
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
Unscored —
A security feature bypass vulnerability exists in Windows Scripting Host which could allow an attacker to bypass Device…
-
High 7.5
A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to properly handle serialized…
KEV Aug 5, 2024 -
Unscored —
An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft…
-
High 7.5CVE-2018-1022 EPSS 15%
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…
-
Unscored —
A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard, …
-
Unscored —
An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, ak…
-
Unscored —
A spoofing vulnerability exists when the Azure IoT Device Provisioning AMQP Transport library improperly validates cert…
-
Unscored —CVE-2018-8136 EPSS 23%
A remote code execution vulnerability exists in the way that Windows handles objects in memory, aka "Windows Remote Cod…