Skip to content
OpenAdvisories

Archive

12 May 2018

Vulnerabilities first published on this day (UTC), newest first.

7 results · Feed

  • Unscored —

    An issue was discovered in SDcms v1.5. Cross-site request forgery (CSRF) vulnerability in /WWW//app/admin/controller/ad…

  • Unscored —

    An issue was discovered in YXcms 1.4.7. Cross-site request forgery (CSRF) vulnerability in protected/apps/admin/control…

  • Unscored —

    ruibaby Halo 0.0.2 has stored XSS via the commentAuthor field to FrontCommentController.java.

  • Unscored —

    ruibaby Halo 0.0.2 has stored XSS via the loginName and loginPwd parameters in a failed login attempt to AdminControlle…

  • Unscored —

    An issue was discovered in Exiv2 0.26. readMetadata in jp2image.cpp allows remote attackers to cause a denial of servic…

  • Unscored —

    An issue was discovered in Exiv2 0.26. The Exiv2::Internal::PngChunk::parseTXTChunk function has a heap-based buffer ov…

  • Unscored —

    The weblogin_log function in /htdocs/cgibin on D-Link DIR-629-B1 devices allows attackers to execute arbitrary code or …