Archive
May 2018
Vulnerabilities first published in this month (UTC), newest first.
104 results · Clear filters · Feed
-
Unscored —
RSA Authentication Manager Security Console, version 8.3 and earlier, contains a XML External Entity (XXE) vulnerabilit…
-
Unscored —CVE-2018-10809 Public exploit
In 2345 Security Guard 3.7, the driver file (2345NetFirewall.sys) allows local users to cause a denial of service (BSOD…
-
Medium 5.3CVE-2018-1313 Public exploit
Improper Access Control in Apache Derby
In Apache Derby 10.3.1.4 to 10.14.1.0, a specially-crafted network packet can be used to request the Derby Network Server to boot a database whose location and contents are under the user's control. If the Derby Network Server is not running with a Java Secur…
-
Unscored —
GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n seque…
-
Unscored —CVE-2018-10757 Public exploit
CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username during a…
-
Unscored —CVE-2018-10752 Public exploit
The Tagregator plugin 0.6 for WordPress has stored XSS via the title field in an Add New action.
-
Critical 9.8
An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host parameter in a diag_a…
KEV Mar 31, 2022 -
Critical 9.8
An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?image…
KEV Mar 31, 2022 -
Unscored —
Stack-based buffer overflow in Activision Infinity Ward Call of Duty Modern Warfare 2 before 2018-04-26 allows remote a…
-
Unscored —CVE-2018-10577 Public exploit
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices …
-
Unscored —
A remote code execution vulnerability exists when the Windows Host Compute Service Shim (hcsshim) library fails to prop…
-
Unscored —CVE-2018-9302 Public exploit
SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to …
-
Unscored —CVE-2018-6242 Public exploit
Some NVIDIA Tegra mobile processors released prior to 2016 contain a buffer overflow vulnerability in BootROM Recovery …
-
Unscored —CVE-2018-10259 Public exploit
An Authenticated Stored XSS vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged …
-
Unscored —CVE-2018-10256 Public exploit
A SQL Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privil…
-
Unscored —CVE-2018-10257 Public exploit
A CSV Injection vulnerability was discovered in HRSALE The Ultimate HRM v1.0.2 that allows a user with low level privil…
-
Unscored —CVE-2018-10255 Public exploit
A CSV Injection vulnerability was discovered in clustercoding Blog Master Pro v1.0 that allows a user with low level pr…
-
Unscored —CVE-2018-10258 Public exploit
A CSV Injection vulnerability was discovered in Shopy Point of Sale v1.0 that allows a user with low level privileges t…
-
Unscored —CVE-2018-10260 Public exploit
A Local File Inclusion vulnerability was found in HRSALE The Ultimate HRM v1.0.2, exploitable by a low privileged user.
-
Unscored —
Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers t…
-
Unscored —
An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically …
-
Unscored —CVE-2018-10365 Public exploit
An XSS issue was discovered in the Threads to Link plugin 1.3 for MyBB. When editing a thread, the user is given the op…
-
Unscored —
On D-Link DCS-5009 devices with firmware 1.08.11 and earlier, DCS-5010 devices with firmware 1.14.09 and earlier, and D…
-
Unscored —CVE-2018-10371 Public exploit
An issue was discovered in the wunderfarm WF Cookie Consent plugin 1.1.3 for WordPress. A persistent cross-site scripti…