Archive
3 August 2018
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Unscored —
/contingency/servlet/ServletFileDownload executes as root and provides unauthenticated access to files via the file par…
-
Unscored —
Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "No…
-
Unscored —
Matera Banco 1.0.0 is vulnerable to path traversal (allowing access to system files outside the default application fol…
-
Unscored —
Matera Banco 1.0.0 allows CSRF, as demonstrated by a /contingency/web/messageSend/messageSendHandler.jsp request.
-
Unscored —
Matera Banco 1.0.0 mishandles Java errors in the backend, as demonstrated by a stack trace revealing use of net.sf.aceg…
-
Unscored —
Matera Banco 1.0.0 is vulnerable to multiple reflected XSS, as demonstrated by the /contingency/web/index.jsp (aka home…
-
Critical 9.8
restforce vulnerable to Improper Input Validation
Insufficient URI encoding in restforce before 3.0.0 allows attacker to inject arbitrary parameters into Salesforce API requests.
-
Critical 9.8
A vulnerability in lack of validation of user-supplied parameters pass to XML-RPC calls on SonicWall Global Management …
-
Unscored —
A vulnerability in uniview EZPlayer 1.0.6 could allow an attacker to execute arbitrary code on a targeted system via vi…
-
Unscored —
Read-Only export policy rules are not correctly enforced in Clustered Data ONTAP 8.3 Release Candidate versions and the…
-
Unscored —
A file upload vulnerability exists in ukcms v1.1.7 and earlier. The vulnerability is due to the system not strictly fil…
-
Unscored —
SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address (aka ip) to /admin/admin_ip.php …
-
Unscored —
cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turne…
-
Unscored —
report_viewer.do in ServiceNow Release Jakarta Patch 8 and earlier allows remote attackers to execute arbitrary code vi…
-
Medium 6.1
MantisBT allows XSS via View Filters page
A cross-site scripting (XSS) vulnerability in the View Filters page (view_filters_page.php) in MantisBT 2.1.0 through 2.15.0 allows remote attackers to inject arbitrary code (if CSP settings permit it) through a crafted PATH_INFO.
-
Unscored —
An issue was discovered in GitLab Community Edition and Enterprise Edition 10.7.x before 10.7.6. The usage of 'url_for'…
-
Unscored —
An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.…
-
Unscored —
The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child process…
-
Unscored —
An issue was discovered in GitLab Community Edition and Enterprise Edition before 10.7.6, 10.8.x before 10.8.5, and 11.…
-
Medium 6.1
MantisBT allows XSS on the Edit Filter page via crafted filter name
An issue was discovered in manage_filter_edit_page.php in MantisBT 2.x through 2.15.0. A cross-site scripting (XSS) vulnerability in the Edit Filter page allows execution of arbitrary code (if CSP settings permit it) when displaying a filter with a crafted na…
-
Unscored —
The mintTokens function of a smart contract implementation for SunContract, an Ethereum token, has an integer overflow …
-
Unscored —
The endCoinFlip function and throwSlammer function of the smart contract implementations for Cryptogs, an Ethereum game…
-
Unscored —
The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on all stack traces' propertyPath parameters.
-
Unscored —
upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter.
-
Unscored —
Samsung Syncthru Web Service V4.05.61 is vulnerable to CSRF on every request, as demonstrated by sws.application/printi…
-
Unscored —
The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in S…
-
Unscored —
The Web server in 3CX version 15.5.8801.3 is vulnerable to Reflected XSS on the api/CallLog TimeZoneName parameter.
-
Unscored —
Samsung Syncthru Web Service V4.05.61 is vulnerable to Multiple unauthenticated XSS attacks on several parameters, as d…
-
Unscored —CVE-2017-15358 Public exploit
Race condition in the Charles Proxy Settings suid binary in Charles Proxy before 4.2.1 allows local users to gain privi…
-
Unscored —
In Universal Media Server (UMS) 7.1.0, the XML parsing engine for SSDP/UPnP functionality is vulnerable to an XML Exter…
-
Medium 6.1CVE-2018-14574 EPSS 25%
Django open redirect
django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.
-
High 7.2
Symfony Host Header Injection
An issue was discovered in HttpKernel in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. When using HttpCache, the values of the X-Forwarded-Host headers are implic…
-
Medium 6.5CVE-2018-14773 EPSS 58%
Symfony HTTP Foundation web cache poisoning
An issue was discovered in Http Foundation in Symfony 2.7.0 through 2.7.48, 2.8.0 through 2.8.43, 3.3.0 through 3.3.17, 3.4.0 through 3.4.13, 4.0.0 through 4.0.13, and 4.1.0 through 4.1.2. It arises from support for a (legacy) IIS header that lets users overr…
-
Unscored —
OCS Inventory 2.4.1 is prone to a remote command-execution vulnerability. Specifically, this issue occurs because the c…
-
Unscored —
OCS Inventory 2.4.1 contains multiple SQL injections in the search engine. Authentication is needed in order to exploit…
-
Unscored —
PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, St…
-
Unscored —
OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of external entities. This issue can be …
-
Unscored —CVE-2018-14497 Public exploit
Tenda D152 ADSL routers allow XSS via a crafted SSID.
-
Unscored —
A command injection vulnerability was found in the web administration console in SoftNAS Cloud before 4.0.3. In particu…
-
Unscored —
An issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.9, 5.0.x through 5.0.28, and 4.0.x throu…