Archive

29 August 2018

Vulnerabilities first published on this day (UTC), newest first.

← July 2018 2018 / August /29 September 2018 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2018-7792

A Permissions, Privileges, and Access Control vulnerability exists in Schneider Electric's Modicon M221 product (all re…

Schneider Electric Modicon M221, all references, all versions prior to firmware V1.6.2.0 ICS / OT

Aug 29, 2018
High 8.8

CVE-2018-15121

Auth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request Forgery

An issue was discovered in Auth0 auth0-aspnet and auth0-aspnet-owin. Affected packages do not use or validate the state parameter of the OAuth 2.0 and OpenID Connect protocols. This leaves applications vulnerable to CSRF attacks during authentication and auth…

auth0-aspnet Auth0-ASPNET-Owin NuGet

Aug 29, 2018