Archive
18 May 2018
Vulnerabilities first published on this day (UTC), newest first.
31 results · Feed
-
Unscored —
In Nessus before 7.1.0, Session Fixation exists due to insufficient session management within the application. An authe…
-
Unscored —
In Nessus before 7.1.0, a XSS vulnerability exists due to improper input validation. A remote authenticated attacker co…
-
Unscored —
totemomail Encryption Gateway before 6.0_b567 allows remote attackers to obtain sensitive information about user sessio…
-
Unscored —
In GE PACSystems RX3i CPE305/310 version 9.20 and prior, RX3i CPE330 version 9.21 and prior, RX3i CPE 400 version 9.30 …
-
Unscored —
An issue was discovered in PoDoFo 0.9.5. The function PdfDocument::Append() in PdfDocument.cpp in PoDoFo 0.9.5 allows r…
-
Unscored —
An issue was discovered in PoDoFo 0.9.5. The function PdfPage::GetPageNumber() in PdfPage.cpp in PoDoFo 0.9.5 allows re…
-
Unscored —
In ImageMagick 7.0.7-23 Q16 x86_64 2018-01-24, there is a heap-based buffer over-read in ReadSUNImage in coders/sun.c, …
-
Unscored —
An issue was discovered in PoDoFo 0.9.5. There is an Excessive Recursion in the PdfPagesTree::GetPageNode() function of…
-
Unscored —
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in…
-
Unscored —
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allo…
-
Unscored —
In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage i…
-
Unscored —
Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handl…
-
Unscored —
util/FileDownloadUtils.java in FileDownloader 1.7.3 does not check an attachment's name. If an attacker places "../" in…
-
Unscored —
app/webroot/js/misp.js in MISP 2.4.91 has a DOM based XSS with cortex type attributes.
-
Unscored —
PackLinuxElf64::unpack in p_lx_elf.cpp in UPX 3.95 allows remote attackers to cause a denial of service (double free), …
-
Unscored —
The BBE theme before 1.53 for WordPress allows a direct launch of an HTML editor.
-
High 7.5
Apache ORC vulnerable to Uncontrolled Recursion
In Apache ORC 1.0.0 to 1.4.3 a malformed ORC file can trigger an endlessly recursive function call in the C++ or Java parser. The impact of this bug is most likely denial-of-service against software that uses the ORC file parser. With the C++ parser, the stac…
-
Unscored —
stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname ar…
-
Unscored —
An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier …
-
Unscored —
In the Linux kernel before 4.13.5, a local user could create keyrings for other users via keyctl commands, setting unwa…
-
Unscored —
An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C L…
-
Unscored —
CoreOS Tectonic 1.7.x before 1.7.9-tectonic.4 and 1.8.x before 1.8.4-tectonic.3 mounts a direct proxy to the kubernetes…
-
Unscored —CVE-2018-9250 EPSS 31%
interface\super\edit_list.php in OpenEMR before v5_0_1_1 allows remote authenticated users to execute arbitrary SQL com…
-
Unscored —
On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can use a default TELNET account to get unaut…
-
Unscored —
On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can forge an HTTP request to inject operating…
-
Medium 4.6
Medtronic N'Vision Clinician Programmer Missing Encryption of Sensitive Data
Medtronic N'Vision Clinician Programmer 8840 N'Vision Clinician Programme and 8870 N'Vision removable Application Card do not encrypt PII and PHI while at rest.
-
Unscored —
Services/Form/classes/class.ilDateDurationInputGUI.php and Services/Form/classes/class.ilDateTimeInputGUI.php in ILIAS …
-
Unscored —
error.php in ILIAS 5.2.x through 5.3.x before 5.3.4 allows XSS via the text of a PDO exception.
-
Unscored —
Schneider Electric Ampla MES 6.4 provides capability to configure users and their privileges. When Ampla MES users are …
-
Unscored —
Schneider Electric Ampla MES 6.4 provides capability to interact with data from third party databases. When connectivit…
-
Unscored —
The etm_setup_aux function in drivers/hwtracing/coresight/coresight-etm-perf.c in the Linux kernel before 4.10.2 allows…