Archive
May 2018
Vulnerabilities first published in this month (UTC), newest first.
104 results · Clear filters · Feed
-
High —CVE-2015-9238 Public exploit
Insecure Comparison in secure-compare
secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first argument with itself, meaning the check passed for any two strings of the same length.
-
Unscored —CVE-2018-11631 Public exploit
Rondaful M1 Wristband Smart Band 1 devices allow remote attackers to send an arbitrary number of call or SMS notificati…
-
High —CVE-2016-10542 Public exploit
DoS due to excessively large websocket message in ws
ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a `ws` server, it is possible to crash the node process. This affects ws …
-
Critical —CVE-2016-10555 Public exploit
Forgeable Public/Private Tokens in jwt-simple
Since "algorithm" isn't enforced in jwt.decode()in jwt-simple 0.3.0 and earlier, a malicious user could choose what algorithm is sent sent to the server. If the server is expecting RSA but is sent HMAC-SHA with RSA's public key, the server will think the publ…
-
Critical 9.8
The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible b…
KEV Mar 25, 2022 -
Unscored —
Bitmain Antminer D3, L3+, and S9 devices allow Remote Command Execution via the system restore function.
-
Unscored —
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remot…
-
Critical —CVE-2015-9235 Public exploit
Verification Bypass in jsonwebtoken
In jsonwebtoken node module before 4.2.2 it is possible for an attacker to bypass verification when a token digitally signed with an asymmetric key (RS/ES family) of algorithms but instead the attacker send a token digitally signed with a symmetric algorithm …
-
Unscored —CVE-2018-10751 Public exploit
A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String E…
-
Unscored —
Dell EMC RecoverPoint versions prior to 5.1.2 and RecoverPoint for VMs versions prior to 5.1.1.3, contain a command inj…
-
Unscored —CVE-2018-11532 Public exploit
An issue was discovered in the ChangUonDyU Advanced Statistics plugin 1.0.2 for MyBB. changstats.php has XSS, as demons…
-
Unscored —CVE-2018-11535 Public exploit
An issue was discovered in SITEMAKIN SLAC (Site Login and Access Control) v1.0. The parameter "my_item_search" in users…
-
Unscored —CVE-2018-11523 Public exploit
upload.php on NUUO NVRmini 2 devices allows Arbitrary File Upload, such as upload of .php files.
-
Unscored —CVE-2018-10732 Public exploit
The REST API in Dataiku DSS before 4.2.3 allows remote attackers to obtain sensitive information (i.e., determine if a …
-
Unscored —CVE-2018-11517 Public exploit
mySCADA myPRO 7 allows remote attackers to discover all ProjectIDs in a project by sending all of the prj parameter val…
-
Unscored —CVE-2018-11508 Public exploit
The compat_get_timex function in kernel/compat.c in the Linux kernel before 4.16.9 allows local users to obtain sensiti…
-
Unscored —CVE-2018-11512 Public exploit
Stored cross-site scripting (XSS) vulnerability in the "Website's name" field found in the "Settings" page under the "G…
-
Unscored —CVE-2018-11505 Public exploit
The Werewolf Online application 0.8.8 for Android allows attackers to discover the Firebase token by reading logcat out…
-
Unscored —CVE-2018-6411 Public exploit
An issue was discovered in Appnitro MachForm before 4.2.3. When the form is set to filter a blacklist, it automatically…
-
Unscored —
An issue was discovered in Appnitro MachForm before 4.2.3. The module in charge of serving stored files gets the path f…
-
Unscored —CVE-2018-6410 Public exploit
An issue was discovered in Appnitro MachForm before 4.2.3. There is a download.php SQL injection via the q parameter.
-
Unscored —CVE-2018-11479 Public exploit
The VPN component in Windscribe 1.81 uses the OpenVPN client for connections. Also, it creates a WindScribeService.exe …
-
Unscored —CVE-2018-11444 Public exploit
A SQL Injection issue was observed in the parameter "q" in jobcard-ongoing.php in EasyService Billing 1.0.
-
Unscored —CVE-2018-11442 Public exploit
A CSRF issue was discovered in EasyService Billing 1.0, which was triggered via a quotation-new3-new2.php?add=true&id= …
-
Unscored —CVE-2018-11443 Public exploit
The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0.
-
Unscored —CVE-2018-11445 Public exploit
A CSRF issue was discovered on the User Add/System Settings Page (system-settings-user-new2.php) in EasyService Billing…
-
High 8.8
Moodle calculated question type allows remote code execution by Question authors
An issue was discovered in Moodle 3.x. A Teacher creating a Calculated question can intentionally cause remote code execution on the server, aka eval injection.
-
Unscored —CVE-2017-14187 Public exploit
A local privilege escalation and local code execution vulnerability in Fortinet FortiOS 5.6.0 to 5.6.2, 5.4.0 to 5.4.8,…
-
Unscored —CVE-2018-11415 Public exploit
SAP Internet Transaction Server (ITS) 6200.X.X has Reflected Cross Site Scripting (XSS) via certain wgate URIs. NOTE: t…
-
Unscored —
In the Linux kernel 4.13 through 4.16.11, ext4_read_inline_data() in fs/ext4/inline.c performs a memcpy with an untrust…
-
Unscored —CVE-2018-11332 Public exploit
Stored cross-site scripting (XSS) vulnerability in the "Site Name" field found in the "site" tab under configurations i…
-
Unscored —CVE-2018-1000199 Public exploit
The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result…
-
Unscored —CVE-2018-11403 Public exploit
DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter.
-
Unscored —CVE-2018-11404 Public exploit
DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter.
-
Unscored —CVE-2018-10653 Public exploit
There is an XML External Entity (XXE) Processing Vulnerability in Citrix XenMobile Server 10.8 before RP2 and 10.7 befo…
-
Unscored —
A flaw in the authentication mechanism in the Login Panel of router D-Link DSL-3782 (A1_WI_20170303 || SWVer="V100R001B…
-
High 7.3CVE-2018-1122 Public exploit
procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unse…
-
Low 3.9CVE-2018-1123 Public exploit
procps-ng before version 3.3.15 is vulnerable to a denial of service in ps via mmap buffer overflow. Inbuilt protection…
-
High 7.3CVE-2018-1124 Public exploit
procps-ng before version 3.3.15 is vulnerable to multiple integer overflows leading to a heap corruption in file2strvec…
-
Critical 9.8
Dolibarr SQL injection vulnerability
SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.