Archive
August 2018
Vulnerabilities first published in this month (UTC), newest first.
1,015 results · Feed
-
Unscored —
PHP 7.x through 7.1.5 allows remote attackers to cause a denial of service (buffer overflow and application crash) or p…
-
Unscored —
PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.
-
Medium 5.4
IBM Maximo Asset Management 7.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitra…
-
High 7.5CVE-2018-1336 EPSS 20%
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder
An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denial of Service. Versions Affected: Apache Tomcat 9.0.0.M9 to 9.0.7, 8.5.0 to 8.5.30, 8.0.0.RC1 to 8.0.51, and 7.0.28 to…
-
Medium 5.9CVE-2018-8037 EPSS 11%
Apache Tomcat Race Condition vulnerability
If an async request was completed by the application at the same time as the container triggered the async timeout, a race condition existed that could result in a user seeing a response intended for a different user. An additional issue was present in the NI…
-
Unscored —
Whale Browser before 1.3.48.4 displays no URL information but only a title of a web page on the browser's address bar w…
-
Medium 6.1
Moderate severity vulnerability that affects apache axis
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
-
High 7.5CVE-2018-10920 Public exploit
Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison …
-
Unscored —
Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builde…
-
Unscored —
Vulnerability in the Oracle Fusion Middleware component of Oracle Fusion Middleware (subcomponent: Oracle Notification …
-
Unscored —
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). …
-
Critical 9.1
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated…
KEV Dec 1, 2021 -
Medium 6.1CVE-2018-14840 Public exploit
Subrion CMS Cross-site Scripting
uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads).
-
Unscored —
rejucms 2.1 has stored XSS via the admin/book.php content parameter.
-
Unscored —
Subrion 4.2.1 is vulnerable to Improper Access control because user groups not having access to the Admin panel are abl…
-
Medium 5.4
Subrion CMS XSS
Subrion CMS v4.2.1 is vulnerable to Stored XSS because of no escaping added to the tooltip information being displayed in multiple areas.
-
Unscored —
_XcursorThemeInherits in library.c in libXcursor before 1.1.15 allows remote attackers to cause denial of service or po…
-
Medium 4.3
Johnson Controls Metasys and BCPro Generation of Error Message Containing Sensitive Information
In Johnson Controls Metasys System Versions 8.0 and prior and BCPro (BCM) all versions prior to 3.0.2, this vulnerability results from improper error handling in HTTP-based communications with the server, which could allow an attacker to obtain technical info…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Web Security Appliance (WSA) could allow an unauthentica…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenti…
-
Unscored —
A vulnerability in the password change function of Cisco Prime Collaboration Provisioning could allow an authenticated,…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an unauthenti…
-
Unscored —
A vulnerability in Cisco AMP for Endpoints Mac Connector Software installed on Apple macOS 10.12 could allow an unauthe…
-
Unscored —
A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could…
-
Critical 9.1
Arbitrary File Upload in GroupWise Administration Console
A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on the server. In certain circumstances this could result in remo…
-
High 8.8CVE-2018-3924 EPSS 44%
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's Foxit PDF Reader versio…
-
Critical 9.4
An exploitable unauthenticated XML external injection vulnerability was identified in FocalScope v2416. A unauthenticat…
-
High 8.0
An exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 9.1…
-
High 8.8
Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality of the CFITSIO library versio…
-
Unscored —
An issue was discovered in DataLife Engine (DLE) through 13.0. An attacker can use XSS (related to the /addnews.html an…
-
High 7.5CVE-2018-8034 EPSS 21%
The host name verification missing in Apache Tomcat
The host name verification when using TLS with the WebSocket client was missing. It is now enabled by default. Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.9, 8.5.0 to 8.5.31, 8.0.0.RC1 to 8.0.52, and 7.0.35 to 7.0.88.
-
Unscored —CVE-2018-10618 Public exploit
Davolink DVW-3200N all version prior to Version 1.00.06. The device generates a weak password hash that is easily crack…
-
Critical 9.1
SQL Injection in pycsw
A SQL injection vulnerability in pycsw all versions before 2.0.2, 1.10.5 and 1.8.6 that leads to read and extract of any data from any table in the pycsw database that the database user has access to. Also on PostgreSQL (at least) it is possible to perform up…
-
High 8.8
IBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary co…
-
High 8.8
A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remot…
-
Medium 5.4
Keycloak Authentication Error
It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further attacks.
-
Medium 4.6
The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init…
-
Low 3.7
Improper Authentication in org.keycloak:keycloak-core
It was found that the keycloak before 2.3.0 did not implement authentication flow correctly. An attacker could use this flaw to construct a phishing URL, from which he could hijack the user's session. This could lead to information disclosure, or permit furth…
-
Medium 5.5
An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when proces…