Archive
6 September 2018
Vulnerabilities first published on this day (UTC), newest first.
51 results · Feed
-
Unscored —
NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handl…
-
Unscored —CVE-2018-16606 Public exploit
In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted pape…
-
Unscored —
An issue was discovered in Nibbleblog v4.0.5. With an admin's username and password, an attacker can execute arbitrary …
-
Unscored —
WordPress version 4.9.8 and earlier contains a CWE-20 Input Validation vulnerability in thumbnail processing that can r…
-
Unscored —
In all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, radio_id is…
-
High 7.3
IBM WebSphere Application Server 7.0, 8.0, and 8.5.5 installations using Form Login could allow a remote attacker to co…
-
Medium 6.1
Cross-Site Scripting in exceljs
An unescaped payload in exceljs <v1.6 allows a possible XSS via cell value when worksheet is displayed in browser.
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. The .setdistillerkeys PostScript command is accepted even t…
-
High 7.5
A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. The lock controlling the…
-
High 7.7
JSON-Patch Out-of-bounds Write vulnerability
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provid…
-
Unscored —
WordPress version <4.9 contains a CWE-20 Input Validation vulnerability in thumbnail processing that can result in remo…