Archive
28 May 2018
Vulnerabilities first published on this day (UTC), newest first.
11 results · Feed
-
Unscored —CVE-2018-10732 Public exploit
The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a …
-
Unscored —
An issue was discovered in the Moderator Log Notes plugin 1.1 for MyBB. It allows moderators to save notes and display …
-
Unscored —CVE-2018-11517 Public exploit
mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of the prj parameter val…
-
Unscored —
Blind SQL injection in coupon_code in the MemberMouse plugin 2.2.8 and prior for WordPress allows an unauthenticated at…
-
Unscored —
The vlc_demux_chained_Delete function in input/demux_chained.c in VideoLAN VLC media player 3.0.1 allows remote attacke…
-
Unscored —
PHP Scripts Mall Naukri Clone Script through 3.0.3 allows Unrestricted Upload of a File with a Dangerous Type in edit_r…
-
Unscored —
The wpForo plugin through 2018-02-05 for WordPress has SQL Injection via a search with the /forum/ wpfo parameter.
-
Unscored —CVE-2018-11508 Public exploit
The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensiti…
-
Unscored —CVE-2018-11512 Public exploit
Stored cross-site scripting (XSS) vulnerability in the "Website's name" field found in the "Settings" page under the "G…
-
Unscored —
The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a d…
-
Unscored —
An issue was discovered in Free Lossless Image Format (FLIF) 0.3. An attacker can trigger a long loop in image_load_pnm…