Archive
18 June 2018
Vulnerabilities first published on this day (UTC), newest first.
27 results · Feed
-
Unscored —
Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length heap buffer whe…
-
Unscored —
Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length stack buffer wh…
-
Unscored —
Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory bu…
-
Unscored —
An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers …
-
Unscored —CVE-2018-1333 EPSS 17%
DoS for HTTP/2 connections by crafted requests
By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.18-2.4.30,2.4.33).
-
Unscored —CVE-2018-9021 Public exploit
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to exe…
-
Unscored —
An improper input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to conduct SQL i…
-
Unscored —
An input validation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to poison log files with …
-
Unscored —
An authentication bypass vulnerability in CA Privileged Access Manager 2.8.2 and earlier allows remote attackers to exe…
-
Unscored —
An input validation vulnerability in CA Privileged Access Manager 2.x allows unprivileged users to execute arbitrary co…
-
Unscored —
A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute m…
-
Unscored —
A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions wi…
-
Unscored —
An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in …
-
Unscored —
Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.
-
Medium 4.3
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3li…
-
Medium 5.5
In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable …
-
Unscored —
libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a cr…
-
Unscored —
Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests wh…
-
Unscored —
A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress.
-
Unscored —
An issue was discovered in MetInfo 6.0.0. admin/app/batch/csvup.php allows remote attackers to delete arbitrary files v…
-
Unscored —
An issue was discovered in MetInfo 6.0.0. install\index.php allows remote attackers to write arbitrary PHP code into co…
-
Critical 9.8
RichFaces vulnerable to Expression Language Injection
JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309.
-
Critical 9.8
Arbitrary code execution in Richfaces
JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, …
-
Unscored —CVE-2018-12524 Public exploit
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /lib/ prov…
-
Unscored —CVE-2018-12523 Public exploit
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /etc/ prov…
-
Unscored —CVE-2018-12522 Public exploit
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /style/ pr…
-
Unscored —CVE-2018-12525 Public exploit
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /images/ p…