Skip to content
OpenAdvisories

Archive

5 September 2018

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2015-9266 Public exploit EPSS 74%

    Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload

    The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. An attacker can exploit this vulnerabil…

  • Unscored —
    CVE-2018-16252 Public exploit

    FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection.

  • Unscored —
    CVE-2018-15918 Public exploit

    An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permissio…

  • Unscored —
    CVE-2018-15917 Public exploit Scanner template

    Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or H…

  • Unscored —
    CVE-2018-16509 Public exploit EPSS 92%

    An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handli…