Archive
June 2018
Vulnerabilities first published in this month (UTC), newest first.
1,787 results · Feed
-
Unscored —
A reflected cross-site scripting vulnerability in CA Privileged Access Manager 2.x allows remote attackers to execute m…
-
Unscored —
A session fixation vulnerability in CA Privileged Access Manager 2.x allows remote attackers to hijack user sessions wi…
-
Unscored —
An improper authentication vulnerability in CA Privileged Access Manager 2.x allows attackers to spoof IP addresses in …
-
Unscored —
Weak cryptography used for passwords in CA Privileged Access Manager 2.x reduces the complexity for password cracking.
-
Medium 4.3
python before versions 2.7.15, 3.4.9, 3.5.6rc1, 3.6.5rc1 and 3.7.0 is vulnerable to catastrophic backtracking in pop3li…
-
Medium 5.5
In Pulp before version 2.16.2, secrets are passed into override_config when triggering a task and then become readable …
-
Unscored —
libjpeg-turbo 1.5.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a cr…
-
Unscored —
Burp Suite Community Edition 1.7.32 and 1.7.33 fail to validate the server certificate in a couple of HTTPS requests wh…
-
Unscored —
A SQL injection issue was discovered in the Quick Chat plugin before 4.00 for WordPress.
-
Unscored —
An issue was discovered in MetInfo 6.0.0. admin/app/batch/csvup.php allows remote attackers to delete arbitrary files v…
-
Unscored —
An issue was discovered in MetInfo 6.0.0. install\index.php allows remote attackers to write arbitrary PHP code into co…
-
Critical 9.8
RichFaces vulnerable to Expression Language Injection
JBoss RichFaces 4.5.3 through 4.5.17 allows unauthenticated remote attackers to inject an arbitrary expression language (EL) variable mapper and execute arbitrary Java code via a MediaOutputResource's resource request, aka RF-14309.
-
Critical 9.8
Arbitrary code execution in Richfaces
JBoss RichFaces 3.1.0 through 3.3.4 allows unauthenticated remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via a /DATA/ substring in a path with an org.richfaces.renderkit.html.Paint2DResource$ImageData object, …
-
Unscored —CVE-2018-12524 Public exploit
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /lib/ prov…
-
Unscored —CVE-2018-12523 Public exploit
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /etc/ prov…
-
Unscored —CVE-2018-12522 Public exploit
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /style/ pr…
-
Unscored —CVE-2018-12525 Public exploit
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2. A direct request to /images/ p…
-
Critical 9.8
Phusion Passenger SpawningKit Contains Arbitrary Read/Write Vulnerability
During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in…
-
Unscored —
An issue was discovered on Eminent EM4544 9.10 devices. The device does not require the user's current password to set …
-
High 7.0
Phusion Passenger Race Condition Allows Privilege Escalation
A race condition in the nginx module in Phusion Passenger 3.x through 5.x before 5.3.2 allows local escalation of privileges when a non-standard passenger_instance_registry_dir with insufficiently strict permissions is configured. Replacing a file with a syml…
-
High 7.8
Incorrect Access Control in Phusion Passenger
An Incorrect Access Control vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows a Passenger-managed malicious application, upon spawning a child process, to report an arbitrary different PID back to Passenger's process manager. If the …
-
Critical 9.8
CodeIgniter Session Fixation Vulnerability
A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.use_strict_mode in the Session Library was mishandled.
-
High 8.8
Insecure Permissions in Phusion Passenger
An Insecure Permissions vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 causes information disclosure in the following situation: given a Passenger-spawned application process that reports that it listens on a certain Unix domain socket, …
-
Medium 6.1
Airbnb Knowledge Repo XSS In Comments
Cross-site scripting (XSS) vulnerability in Airbnb Knowledge Repo 0.7.4 allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, as demonstrated by the post/posts/new_report.kp URI.
-
Unscored —
An issue was discovered in Cloud Media Popcorn A-200 03-05-130708-21-POP-411-000 firmware. It is configured to provide …
-
Unscored —
An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before …
-
Unscored —
Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10…
-
Unscored —
Etere EtereWeb before 28.1.20 has a pre-authentication blind SQL injection in the POST parameters txUserName and txPass…
-
Medium 6.1
oauth2orize-fprm XSS vulnerability
index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL.
-
Unscored —
Authentication Bypass by Spoofing vulnerability in ECOS System Management Appliance (aka SMA) 5.2.68 allows a man-in-th…
-
Unscored —
Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication …
-
Unscored —
Incorrect access control in ECOS System Management Appliance (aka SMA) 5.2.68 allows a user to compromise authenticatio…
-
Unscored —
Reliance on Security Through Obscurity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to pa…
-
Unscored —
Undocumented Factory Backdoor in ECOS System Management Appliance (aka SMA) 5.2.68 allows the vendor to extract confide…
-
Unscored —
Incomplete Cleanup vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authenticat…
-
Unscored —
Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows a local attacker to duplicate an authenti…
-
Unscored —
Undocumented Factory Backdoor in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows the vendor to extract confidential infor…
-
Unscored —
Protection Mechanism Failure in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attacker to compromise authentication …
-
Unscored —
Insufficient Verification of Data Authenticity vulnerability in ECOS Secure Boot Stick (aka SBS) 5.6.5 allows an attack…
-
Unscored —CVE-2018-10969 Public exploit
SQL injection vulnerability in the Pie Register plugin before 3.0.10 for WordPress allows remote attackers to execute a…