Archive
8 August 2018
Vulnerabilities first published on this day (UTC), newest first.
24 results · Feed
-
Medium 5.3
Improper Authorization in aedes
Improper authorization in aedes version <0.35.0 will publish a LWT in a channel when a client is not authorized.
-
Unscored —
An issue was discovered in rsn_supp/wpa.c in wpa_supplicant 2.0 through 2.6. Under certain conditions, the integrity of…
-
Unscored —
This module enables you to add or overwrite PHP configuration on a drupal website. The module doesn't sufficiently allo…
-
Unscored —
An integer overflow in the unprotected distributeToken function of a smart contract implementation for EETHER (EETHER),…
-
Unscored —
CouchDB administrative users before 2.2.0 can configure the database server via HTTP(S). Due to insufficient validation…
-
High 7.5
TIBCO ActiveMatrix BusinessWorks 5.X XML eXternal Entity Vulnerability
The BusinessWorks engine component of TIBCO Software Inc.'s TIBCO ActiveMatrix BusinessWorks, TIBCO ActiveMatrix BusinessWorks for z/Linux, and TIBCO ActiveMatrix BusinessWorks Distribution for TIBCO Silver Fabric contains a vulnerability that may allow XML e…
-
Unscored —
An issue was discovered in Ignited CMS through 2017-02-19. ign/index.php/admin/pages/add_page allows a CSRF attack to a…
-
Unscored —
ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (h…
-
Unscored —
An issue was discovered in Juunan06 eCommerce through 2018-08-05. There is a CSRF vulnerability in ee/eBoutique/app/tem…
-
Unscored —
An issue was discovered in OneThink v1.1. There is a CSRF vulnerability in admin.php?s=/User/add.html that can add a us…
-
Unscored —
An issue was discovered in OneThink v1.1. There is a CSRF vulnerability in admin.php?s=/AuthManager/addToGroup.html tha…
-
Unscored —
AuraCMS 2.3 allows XSS via a Bukutamu -> AddGuestbook action.
-
Unscored —
A CSRF vulnerability in the admin panel in Gogs through 0.11.53 allows remote attackers to execute admin operations via…
-
High 8.6
Gogs and Gitea SSRF Vulnerability
An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services.
-
Unscored —
Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption…
-
Unscored —
A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 al…
-
Unscored —
XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at Qt5Core!QVariant::~QVa…
-
Unscored —
In Gxlcms 2.0, a news/index.php?s=Admin-Admin-Insert CSRF attack can add an administrator account.
-
Unscored —
CeLa Link CLR-M20 devices allow unauthorized users to upload any file (e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml…
-
Unscored —
A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids…
-
Unscored —
XnView 2.45 allows remote attackers to cause a denial of service (Read Access Violation at the Instruction Pointer and …
-
Medium 6.1
Open Redirect
Open redirect vulnerability in Gogs before 0.12 allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via an initial /\ substring in the user/login redirect_to parameter, related to the function isValidRedirect in routes…
-
Unscored —
XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at MSVCR120!memcpy+0x0000…
-
Unscored —
In csrf-magic before 1.0.4, if $GLOBALS['csrf']['secret'] is not configured, the Anti-CSRF Token used is predictable an…