Archive
August 2018
Vulnerabilities first published in this month (UTC), newest first.
1,015 results · Feed
-
Unscored —
An issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:7.1.2/N2G47H/329100b:user/release-keys devices. Any app co-…
-
Unscored —
An issue was discovered on Orbic Wonder Orbic/RC555L/RC555L:7.1.2/N2G47H/329100b:user/release-keys devices, allowing at…
-
Unscored —
The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys contains a hidd…
-
Unscored —
qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishan…
-
Unscored —CVE-2018-15912 Public exploit
An issue was discovered in manjaro-update-system.sh in manjaro-system 20180716-1 on Manjaro Linux. A local attacker can…
-
Unscored —
CMS ISWEB 3.5.3 has XSS via the ordineRis, sezioneRicerca, or oggettiRicerca parameter to index.php.
-
Unscored —
Technicolor (formerly RCA) TC8305C devices allow remote attackers to cause a denial of service (networking outage) via …
-
Unscored —
Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before XXXXXX-VVTK-xx06a allow …
-
Unscored —CVE-2017-17762 Scanner template
XML external entity (XXE) vulnerability in Episerver 7 patch 4 and earlier allows remote attackers to read arbitrary fi…
-
Unscored —
This module enables you to build eCommerce websites and applications with Drupal. The module doesn't sufficiently check…
-
Unscored —
ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication,…
-
Critical 9.8
Grafana Authentication Bypass
Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.
-
Unscored —
Adding method ACLs in remap.config can cause a segfault when the user makes a carefully crafted request. This affects v…
-
Unscored —CVE-2018-12824 EPSS 11%
Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead …
-
Unscored —
Adobe Flash Player 30.0.0.134 and earlier have a security bypass vulnerability. Successful exploitation could lead to s…
-
Unscored —
Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead …
-
Unscored —
Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlie…
-
Unscored —
Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 have a memory corruption vulnerability. Succe…
-
Unscored —
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. Succ…
-
Unscored —
Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have an input validation bypass vulnerability. Successful…
-
Unscored —
Adobe Photoshop CC 2018 before 19.1.6 and Photoshop CC 2017 before 18.1.6 have a memory corruption vulnerability. Succe…
-
Unscored —
Adobe Flash Player 30.0.0.134 and earlier have a "use of a component with a known vulnerability" vulnerability. Success…
-
Unscored —
Adobe Acrobat and Reader versions 2018.011.20055 and earlier, 2017.011.30096 and earlier, and 2015.006.30434 and earlie…
-
Unscored —
Adobe Creative Cloud Desktop Application before 4.6.1 has an improper certificate validation vulnerability. Successful …
-
Unscored —
Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead …
-
Unscored —
A carefully crafted invalid TLS handshake can cause Apache Traffic Server (ATS) to segfault. This affects version 6.2.2…
-
Unscored —
When there are multiple ranges in a range request, Apache Traffic Server (ATS) will read the entire object from cache. …
-
Unscored —CVE-2018-8004 Public exploit
There are multiple HTTP smuggling and cache poisoning issues when clients making malicious requests interact with Apach…
-
Unscored —
Pages that are rendered using the ESI plugin can have access to the cookie header when the plugin is configured not to …
-
Unscored —
Adobe Creative Cloud Desktop Application before 4.5.5.342 (installer) has an insecure library loading (dll hijacking) v…
-
Unscored —
dwarf_getaranges in dwarf_getaranges.c in libdw in elfutils before 2018-08-18 allows remote attackers to cause a denial…
-
Unscored —
An issue was discovered in Joomla! before 3.8.12. Inadequate checks regarding disabled fields can lead to an ACL violat…
-
Unscored —
An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically p…
-
High 8.8
Auth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request Forgery
An issue was discovered in Auth0 auth0-aspnet and auth0-aspnet-owin. Affected packages do not use or validate the state parameter of the OAuth 2.0 and OpenID Connect protocols. This leaves applications vulnerable to CSRF attacks during authentication and auth…
-
Unscored —
An issue was discovered in Joomla! before 3.8.12. Inadequate output filtering on the user profile page could lead to a …
-
Unscored —
PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScrip…
-
Unscored —
PHP Scripts Mall Website Seller Script 2.0.5 has XSS via Personal Address or Company Name.
-
High 7.5
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core H…
-
Unscored —
Inappropriate implementation in V8 WebAssembly JS bindings in Google Chrome prior to 63.0.3239.108 allowed a remote att…
-
Unscored —
A stack buffer overflow in the QUIC networking stack in Google Chrome prior to 62.0.3202.89 allowed a remote attacker t…