Archive
12 September 2018
Vulnerabilities first published on this day (UTC), newest first.
69 results · Feed
-
Unscored —
An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable co…
-
Unscored —
An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window runn…
-
Unscored —
In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/…
-
Unscored —
Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to download any confidenti…
-
Unscored —
Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vu…
-
Unscored —
Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. Unauthenticated adjac…
-
Unscored —
Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of ser…
-
Unscored —
Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vu…
-
Unscored —
Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the vers…
-
Unscored —
In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient valid…
-
Unscored —
Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attacker…
-
Medium 4.3
IBM Datacap Fastdoc Capture 9.1.1, 9.1.3, and 9.1.4 could allow an authenticated user to bypass future authentication m…
-
Unscored —
A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021). Improper access co…
-
Unscored —
A vulnerability has been identified in SIEMENS TD Keypad Designer (All versions). A DLL hijacking vulnerability exists …
-
Unscored —
A vulnerability has been identified in SCALANCE X300 (All versions < V4.0.0), SCALANCE X408 (All versions < V4.0.0), SC…
-
Medium 5.4
An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web r…
-
Medium 5.4
An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web r…
-
Medium 5.4
An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web r…
-
Medium 5.4
An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web r…
-
Unscored —
In FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the qsort algorithm has a deterministic recursion pat…
-
Unscored —
In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections …
-
Unscored —CVE-2017-1085 Public exploit
In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK may turn a read-only me…
-
Unscored —
In FreeBSD before 11.2-RELEASE, a stack guard-page is available but is disabled by default. This results in the possibi…
-
Unscored —
Inteno DG400 WU7U_ELION3.11.6-170614_1328 devices allow remote attackers to cause a denial of service (connectivity los…
-
Unscored —
xunfeng 0.2.0 allows command execution via CSRF because masscan.py mishandles backquote characters, a related issue to …
-
Unscored —
An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. The backup tape controller (butc) process acce…
-
Unscored —CVE-2018-16946 Public exploit
LG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control. Attackers are able to download /…
-
Unscored —
An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several data types used as RPC input variables…
-
Unscored —
An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Several RPC server routines did not fully init…