3 August 2018

50 results · Feed

• High 8.8
  CVE-2018-1524

  IBM Maximo Asset Management 7.6 through 7.6.3 installs with a default administrator account that a remote intruder coul…

  IBM Maximo Asset Management
  Aug 3, 2018
• Unscored —
  CVE-2017-8316

  IntelliJ IDEA XML parser was found vulnerable to XML External Entity attack, an attacker can exploit the vulnerability …

  JetBrains IntelliJ IDEA
  Aug 3, 2018
• Unscored —
  CVE-2018-6590

  CA API Developer Portal 4.x, prior to v4.2.5.3 and v4.2.7.1, has an unspecified reflected cross-site scripting vulnerab…

  CA Technologies CA API Developer Portal
  Aug 3, 2018
• Unscored —
  CVE-2018-5489

  NetApp 7-Mode Transition Tool allows users with valid credentials to access functions and information which may have be…

  NETAPP 7-Mode Transition Tool
  Aug 3, 2018
• Unscored —
  CVE-2018-14884

  An issue was discovered in PHP 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. Inappropriately parsin…

  php7 Alpine
  Aug 3, 2018
• Unscored —
  CVE-2018-14883

  An issue was discovered in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, and 7.2.x before 7.2.8. An Inte…

  php5 php7.0 php7.2 php7 Ubuntu Alpine
  Aug 3, 2018
• Unscored —
  CVE-2018-14873

  An issue was discovered in Rincewind 0.1. There is a cross-site scripting (XSS) vulnerability involving a p=account req…

  Aug 3, 2018
• Unscored —
  CVE-2018-14872

  An issue was discovered in Rincewind 0.1. A reinstall vulnerability exists because the parameter p of index.php and ano…

  Aug 3, 2018
• Unscored —
  CVE-2018-14877

  An issue was discovered in WeaselCMS v0.3.5. XSS exists via Site Language, Site Title, Site Description, and Site Keywo…

  Aug 3, 2018
• Unscored —
  CVE-2018-14876

  An issue was discovered in image_save_png in image/image-png.cpp in Free Lossless Image Format (FLIF) 0.3. Attackers ca…

  Aug 3, 2018