Archive
5 September 2018
Vulnerabilities first published on this day (UTC), newest first.
5 results · Clear filters · Feed
-
Critical 9.8
Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload
The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. An attacker can exploit this vulnerabil…
-
Unscored —CVE-2018-16252 Public exploit
FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection.
-
Unscored —CVE-2018-15918 Public exploit
An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permissio…
-
Unscored —
Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or H…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handli…