Skip to content
OpenAdvisories

Archive

28 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /28 September 2018 →
  1. 179
  2. 240
  3. 350
  4. 41
  5. 521
  6. 681
  7. 712
  8. 824
  9. 914
  10. 1028
  11. 11 
  12. 123
  13. 1336
  14. 1434
  15. 15109
  16. 1615
  17. 1729
  18. 188
  19. 19 
  20. 2067
  21. 2128
  22. 2225
  23. 2346
  24. 2434
  25. 2527
  26. 268
  27. 2727
  28. 2854
  29. 2946
  30. 3056
  31. 3113
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Unscored —
    CVE-2018-6643 Public exploit

    Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter.

  • Unscored —
    CVE-2018-15596 Public exploit

    An issue was discovered in inc/class_feedgeneration.php in MyBB 1.8.17. On the forum RSS Syndication page, one can gene…

  • Unscored —
    CVE-2018-15884 Public exploit

    RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter.

  • Unscored —
    CVE-2018-15608 Public exploit

    Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen.

  • Unscored —
    CVE-2018-15740 Public exploit

    Zoho ManageEngine ADManager Plus 6.5.7 has XSS on the "Workflow Delegation" "Requester Roles" screen.

  • Unscored —
    CVE-2018-15839 Public exploit EPSS 45%

    D-Link DIR-615 devices have a buffer overflow via a long Authorization HTTP header.

  • Unscored —
    CVE-2014-6046 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in phpMyFAQ before 2.8.13 allow remote attackers to hijack t…

  • Unscored —
    CVE-2014-6045 Public exploit

    SQL injection vulnerability in phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to exe…

  • Unscored —
    CVE-2014-6047 Public exploit

    phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leve…

  • Unscored —
    CVE-2014-6050 Public exploit

    phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request.

  • Unscored —
    CVE-2014-6048 Public exploit

    phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.

  • Unscored —
    CVE-2014-6049 Public exploit

    phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted in…