Archive
August 2018
Vulnerabilities first published in this month (UTC), newest first.
1,015 results · Feed
-
High 8.6
Gogs and Gitea SSRF Vulnerability
An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services.
-
Unscored —
Nmap through 7.70, when the -sV option is used, allows remote attackers to cause a denial of service (stack consumption…
-
Unscored —
A reflected Cross-site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager 13 before build 13820 al…
-
Unscored —
XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at Qt5Core!QVariant::~QVa…
-
Unscored —
In Gxlcms 2.0, a news/index.php?s=Admin-Admin-Insert CSRF attack can add an administrator account.
-
Unscored —
CeLa Link CLR-M20 devices allow unauthorized users to upload any file (e.g., asp, aspx, cfm, html, jhtml, jsp, or shtml…
-
Unscored —
A SQL Injection vulnerability exists in the Zoho ManageEngine Applications Manager 13 before build 13820 via the resids…
-
Unscored —
XnView 2.45 allows remote attackers to cause a denial of service (Read Access Violation at the Instruction Pointer and …
-
Medium 6.1
Open Redirect
Open redirect vulnerability in Gogs before 0.12 allows remote attackers to redirect users to arbitrary websites and conduct phishing attacks via an initial /\ substring in the user/login redirect_to parameter, related to the function isValidRedirect in routes…
-
Unscored —
XnView 2.45 allows remote attackers to cause a denial of service (User Mode Write AV starting at MSVCR120!memcpy+0x0000…
-
Unscored —
In csrf-magic before 1.0.4, if $GLOBALS['csrf']['secret'] is not configured, the Anti-CSRF Token used is predictable an…
-
High 8.0
Bluetooth implementations may not sufficiently validate elliptic curve parameters during Diffie-Hellman key exchange
Bluetooth firmware or operating system software drivers in macOS versions before 10.13, High Sierra and iOS versions before 11.4, and Android versions before the 2018-06-05 patch may not sufficiently validate elliptic curve parameters used to generate public …
-
Unscored —
The pcpu_embed_first_chunk function in mm/percpu.c in the Linux kernel through 4.14.14 allows local users to obtain sen…
-
Unscored —
The swiotlb_print_info function in lib/swiotlb.c in the Linux kernel through 4.14.14 allows local users to obtain sensi…
-
Unscored —
A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4). An attacker with network …
-
Unscored —
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions),…
-
Unscored —
A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manage…
-
Unscored —
A vulnerability has been identified in SIMATIC STEP 7 (TIA Portal) and WinCC (TIA Portal) V10, V11, V12 (All versions),…
-
Unscored —
The randMod() function of the smart contract implementation for MyCryptoChamp, an Ethereum game, generates a random val…
-
Unscored —
An issue was discovered in ext/standard/link_win32.c in PHP before 5.6.37, 7.0.x before 7.0.31, 7.1.x before 7.1.20, an…
-
Unscored —
ThinkSAAS through 2018-07-25 has XSS via the index.php?app=group&ac=create&ts=do groupdesc parameter.
-
Medium 5.4
IBM Rhapsody Model Manager 6.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitr…
-
Unscored —
ThinkSAAS through 2018-07-25 has XSS via the index.php?app=article&ac=comment&ts=do content parameter.
-
Low 3.7
Emails were sent to addresses not associated with actual users of Jenkins by Email Extension Plugin
jenkins-email-ext before version 2.57.1 is vulnerable to an Information Exposure. The Email Extension Plugins is able to send emails to a dynamically created list of users based on the changelogs, like authors of SCM changes since the last successful build. T…
-
Unscored —CVE-2018-14869 Public exploit
PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field …
-
Unscored —
Unrestricted file upload (with remote code execution) in require/mail/NotificationMail.php in Webconsole in OCS Invento…
-
High 7.5
Symfony Directory Traversal
An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. The Intl component includes various bundle readers that are used to read resource bundles from the local filesystem. The read() methods of these classes use a …
-
Medium 6.5
Symfony SSRF Vulnerability via Form Component
An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. When a form is submitted by the user, the request handler classes of the Form component merge POST data and uploaded files data into one array. This big array …
-
High 8.5
Specially crafted commands sent through the PubNub service in Insteon Hub 2245-222 with firmware version 1012 can cause…
-
Medium 5.9
Symfony CSRF Vulnerability
An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. The current implementation of CSRF protection in Symfony (Version >=2) does not use different tokens for HTTP and HTTPS; therefore the token is subject to MITM…
-
Unscored —
Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions. An authenticate…
-
Unscored —
A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24.
-
Unscored —
HPE has identified a remote HOST header attack vulnerability in HPE CentralView Fraud Risk Management earlier than vers…
-
Unscored —
A remote bypass of security restrictions vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.…
-
Unscored —
HPE XP P9000 Command View Advanced Edition Software (CVAE) has open URL redirection vulnerability in versions 7.0.0-00 …
-
Unscored —CVE-2018-7092 EPSS 24%
A potential security vulnerability has been identified in HPE Intelligent Management Center Platform (IMC Plat) 7.3 E05…
-
Unscored —
HPE has identified a remote access to sensitive information vulnerability in HPE Network Function Virtualization Direct…
-
Unscored —
A remote code execution was identified in HPE Integrated Lights-Out 4 (iLO 4) earlier than version v2.60 and HPE Integr…
-
Unscored —
Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attack…
-
Unscored —
Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users…