Archive
August 2018
Vulnerabilities first published in this month (UTC), newest first.
1,015 results · Feed
-
Unscored —CVE-2014-6047 Public exploit
phpMyFAQ before 2.8.13 allows remote authenticated users with certain permissions to read arbitrary attachments by leve…
-
Unscored —CVE-2014-6050 Public exploit
phpMyFAQ before 2.8.13 allows remote attackers to bypass the CAPTCHA protection mechanism by replaying the request.
-
Unscored —CVE-2014-6048 Public exploit
phpMyFAQ before 2.8.13 allows remote attackers to read arbitrary attachments via a direct request.
-
Unscored —CVE-2014-6049 Public exploit
phpMyFAQ before 2.8.13 allows remote authenticated users with admin privileges to bypass authorization via a crafted in…
-
Unscored —
The ProfileLinkUserFormat component of Jira Server before version 7.6.8, from version 7.7.0 before version 7.7.5, from …
-
Unscored —
Various resources in Atlassian Jira before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 b…
-
Medium 6.5
IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 contain an information discl…
-
Medium 5.3
Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existen…
-
Unscored —
In Artifex Ghostscript 9.23 before 2018-08-24, attackers able to supply crafted PostScript could use uninitialized memo…
-
Unscored —
In Artifex Ghostscript 9.23 before 2018-08-24, a type confusion using the .shfill operator could be used by attackers a…
-
Unscored —
In Artifex Ghostscript 9.23 before 2018-08-23, attackers are able to supply malicious PostScript files to bypass .tempf…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the…
-
Medium 5.1
A vulnerability was found in openstack-cinder releases up to and including Queens, allowing newly created volumes in ce…
-
Low 3.1
IBM WebSphere Commerce Enterprise, Professional, Express, and Developer 9.0.0.0 - 9.0.0.4, 8.0.0.0 - 8.0.0.19, 8.0.1.0 …
-
Critical 9.9
An exploitable buffer overflow vulnerability exists in the camera 'update' feature of video-core's HTTP server of Samsu…
-
Medium 6.8
An exploitable information disclosure vulnerability exists in the crash handler of the hubCore binary of the Samsung Sm…
-
Critical 9.9
An exploitable buffer overflow vulnerability exists in the /cameras/XXXX/clips handler of video-core's HTTP server of S…
-
Medium 6.5
An exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.2…
-
Unscored —
Visiology Flipbox Software Suite before 2.7.0 allows directory traversal via %5c%2e%2e%2f because it does not sanitize …
-
Unscored —
Main_Analysis_Content.asp in ASUS DSL-N12E_C1 1.1.2.3_345 is prone to Authenticated Remote Command Execution, which all…
-
Unscored —
A10 ACOS Web Application Firewall (WAF) 2.7.1 and 2.7.2 before 2.7.2-P12, 4.1.0 before 4.1.0-P11, 4.1.1 before 4.1.1-P8…
-
Unscored —
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to delete any file on the file…
-
Unscored —
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts…
-
Unscored —
ASUSTOR Data Master 3.1.5 and below makes an HTTP request for a configuration file that is vulnerable to XSS. A man in …
-
Unscored —
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to upload files to arbitrary l…
-
Unscored —
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on the file s…
-
Unscored —
ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on a share by…
-
Unscored —CVE-2018-0715 Public exploit
Cross-site scripting vulnerability in QNAP Photo Station versions 5.7.0 and earlier could allow remote attackers to inj…
-
Unscored —
A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remote…
-
Unscored —CVE-2015-9263 EPSS 13%
An issue was discovered in post2file.php in Up.Time Monitoring Station 7.5.0 (build 16) and 7.4.0 (build 13). It allows…
-
Unscored —
Lansweeper 4.x through 6.x before 6.0.0.48 allows attackers to execute arbitrary code on the administrator's workstatio…
-
Unscored —
An issue was discovered in MiniCMS 1.10. There is a post.php?date= XSS vulnerability.
-
Unscored —
A SQL injection was discovered in /coreframe/app/admin/pay/admin/index.php in WUZHI CMS 4.1.0 via the index.php?m=pay&f…
-
Unscored —
A SQL injection was discovered in /coreframe/app/admin/copyfrom.php in WUZHI CMS 4.1.0 via the index.php?m=core&f=copyf…
-
Unscored —
An SSRF vulnerability was discovered in idreamsoft iCMS 7.0.11 because the remote function in app/spider/spider_tools.c…
-
Unscored —
Umbraco before 7.2.0 has a remote PHP code execution vulnerability because Umbraco.Web.UI/config/umbracoSettings.Releas…
-
Unscored —
Ovation FindMe 1.4-1083-1 is intended to support transmission of network traffic from covert video recorders but does n…
-
Unscored —
Zyxel VMG3312 B10B devices are affected by a persistent XSS vulnerability via the pages/connectionStatus/connectionStat…
-
Unscored —
An issue was discovered in ASPCMS 2.5.6. When registering ordinary users in the addUser function of the /member/reg.asp…
-
Unscored —CVE-2017-18345 Public exploit
The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the cred…