Archive
18 July 2018
Vulnerabilities first published on this day (UTC), newest first.
253 results · Feed
-
Unscored —
A vulnerability in the Open Systems Gateway initiative (OSGi) interface of Cisco Policy Suite before 18.1.0 could allow…
-
Unscored —
A vulnerability in the Policy Builder database of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remo…
-
Unscored —
A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution coul…
-
Unscored —
Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webe…
-
Unscored —
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote …
-
Unscored —
A vulnerability in the Zero Touch Provisioning (ZTP) subsystem of the Cisco SD-WAN Solution could allow an authenticate…
-
Unscored —
A Read-Only User Effect Change vulnerability in the Policy Builder interface of Cisco Policy Suite could allow an authe…
-
Unscored —
A vulnerability in the configuration and management database of the Cisco SD-WAN Solution could allow an authenticated,…
-
Unscored —
Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) co…
-
Unscored —
A vulnerability in the command-line tcpdump utility in the Cisco SD-WAN Solution could allow an authenticated, local at…
-
Unscored —
Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webe…
-
Unscored —
Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) co…
-
Unscored —
A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute…
-
Unscored —
A vulnerability in the CLI of Cisco Policy Suite could allow an authenticated, local attacker to access files owned by …
-
Unscored —
A vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an authenticated, remote at…
-
Unscored —
Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) co…
-
Unscored —
A vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, rem…
-
Unscored —
A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, …
-
Unscored —
A vulnerability in the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, …
-
Unscored —
A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, rem…
-
Unscored —
A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files…
-
Unscored —
A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 could allow an authenticated, remote a…
-
Unscored —
A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitra…
-
Unscored —
Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) co…
-
Unscored —
A vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote attacker to conduct a Docume…
-
Unscored —
Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote …
-
Unscored —
A vulnerability in the Cluster Manager of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attac…
-
Unscored —
A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could…
-
Unscored —
A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastruct…
-
Unscored —
joyplus-cms 1.6.0 has XSS via the manager/admin_ajax.php can_search_device array parameter.
-
Unscored —CVE-2018-14364 EPSS 48%
GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Tr…
-
Unscored —
joyplus-cms 1.6.0 has SQL Injection via the manager/admin_ajax.php val parameter.
-
Unscored —
An issue was discovered in WonderCMS before 2.5.2. An attacker can create a new session on a web application and record…
-
Unscored —
wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of servic…
-
Unscored —
JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to…
-
Unscored —
PHP Scripts Mall JOB SITE (aka Job Portal) 3.0.1 has Cross-site Scripting (XSS) via the search bar.
-
Unscored —
Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational…
-
High 7.3
Linux kernel ext4 filesystem is vulnerable to an out-of-bound access in the ext4_ext_drop_refs() function when operatin…
-
Unscored —
ABB Panel Builder 800 all versions has an improper input validation vulnerability which may allow an attacker to insert…
-
Unscored —
InstantCMS 2.10.1 has /redirect?url= XSS.