Archive
May 2018
Vulnerabilities first published in this month (UTC), newest first.
1,164 results · Feed
-
Unscored —CVE-2018-0258 EPSS 48%
A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker …
-
Unscored —
A vulnerability when handling incoming 802.11 Association Requests for Cisco Aironet 1800 Series Access Point (APs) on …
-
Unscored —
A vulnerability in the assignment and management of default user accounts for Secure Shell (SSH) access to Cisco Airone…
-
Unscored —
A vulnerability in the 802.11 frame validation functionality of the Cisco Wireless LAN Controller (WLC) could allow an …
-
Unscored —
A vulnerability in service logging for Cisco Prime Service Catalog could allow an authenticated, remote attacker to den…
-
Unscored —
A vulnerability in the implementation of Point-to-Point Tunneling Protocol (PPTP) functionality in Cisco Aironet 1810, …
-
Unscored —
A vulnerability in Central Web Authentication (CWA) with FlexConnect Access Points (APs) for Cisco Aironet 1560, 1810, …
-
Unscored —
A vulnerability in the netconf interface of Cisco IOS XR Software could allow an unauthenticated, remote attacker to ca…
-
Unscored —
A vulnerability in the ACS Report component of Cisco Secure Access Control System (ACS) could allow an unauthenticated,…
-
Unscored —
A vulnerability in Web Authentication (WebAuth) clients for the Cisco Wireless LAN Controller (WLC) and Aironet Access …
-
Unscored —
A vulnerability in the management console of Cisco Firepower System Software could allow an unauthenticated, remote att…
-
Unscored —
In Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the lzma_decompress_buf function of stream.c, which a…
-
Unscored —
The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows …
-
Unscored —
A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8, which allows remote attackers to…
-
Unscored —
XSS exists in Flexense DiskSavvy Enterprise from v10.4 to v10.7.
-
Unscored —
An XSS in Flexense SyncBreeze affects all versions (tested from SyncBreeze Enterprise from v10.1 to v10.7).
-
Unscored —
XSS exists in Flexense DupScout Enterprise from v10.0.18 to v10.7.
-
Unscored —
Flexense DiskBoss Enterprise v7.4.28 to v9.1.16 has XSS.
-
Unscored —CVE-2018-10577 Public exploit
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices …
-
Unscored —
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices …
-
Unscored —
XSS exists in Flexense VX Search Enterprise from v10.1.12 to v10.7.
-
Unscored —
Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memo…
-
Unscored —
XSS exists in Flexense DiskPulse Enterprise from v10.4 to v10.7.
-
Unscored —
XSS exists in Flexense DiskSorter Enterprise from v9.5.12 to v10.7.
-
Unscored —
Ansible Tower through version 3.2.3 has a vulnerability that allows users only with access to define variables for a jo…
-
Unscored —
A remote code execution vulnerability exists when the Windows Host Compute Service Shim (hcsshim) library fails to prop…
-
Unscored —
The DecodeGifImg function in ngiflib.c in MiniUPnP ngiflib 0.4 lacks certain checks against width and height, which all…
-
Unscored —
Z-BlogPHP 1.5.2 has a stored Cross Site Scripting Vulnerability exploitable by an administrator who navigates to "Web s…
-
Unscored —
Ansible Tower before version 3.2.4 has a flaw in the management of system and organization administrators that allows f…
-
Unscored —
The do_get_mempolicy function in mm/mempolicy.c in the Linux kernel before 4.12.9 allows local users to cause a denial …
-
Unscored —
CeNova, Night OWL, Novo, Pulnix, QSee, Securus, and TBK Vision DVR devices allow remote attackers to download a file an…
-
Unscored —
ILIAS 5.3.4 has XSS through unsanitized output of PHP_SELF, related to shib_logout.php and third-party demo files.
-
High 7.5
Matrix Synapse DoS
Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to federation/federation_base.py and handlers/message.py, as exploited in the wild in April 2018.
-
Unscored —CVE-2018-9302 Public exploit
SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to …
-
Unscored —
The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows a…
-
Unscored —
VMware Xenon 1.x, prior to 1.5.4-CR7_1, 1.5.7_7, 1.5.4-CR6_2, 1.3.7-CR1_2, 1.1.0-CR0-3, 1.1.0-CR3_1,1.4.2-CR4_1, and 1.…
-
Unscored —
IBM API Connect 5.0.8.1 and 5.0.8.2 could allow a user to get access to internal environment and sensitive API details …
-
Unscored —
On F5 BIG-IP 13.1.0-13.1.0.5, malformed TCP packets sent to a self IP address or a FastL4 virtual server may cause an i…
-
Unscored —
On F5 BIG-IP 13.1.0-13.1.0.5, maliciously crafted HTTP/2 request frames can lead to denial of service. There is data pl…
-
Unscored —
On F5 BIG-IP 13.0.0-13.1.0.5, using RADIUS authentication responses from a RADIUS server with IPv6 addresses may cause …