Skip to content
OpenAdvisories

Archive

14 September 2018

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2018-16706 Public exploit EPSS 22%

    LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/dev…

  • Unscored —
    CVE-2018-16288 Public exploit Scanner template EPSS 36%

    LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.

  • High 7.5
    CVE-2018-12086 Public exploit EPSS 12%

    High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua

    Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.

  • Unscored —
    CVE-2018-10763 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (…

  • Unscored —
    CVE-2018-10814 Public exploit

    Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.

  • Critical 9.8
    CVE-2018-17057 Public exploit EPSS 26%

    TCPDF vulnerable to attackers triggering deserialization of arbitrary data

    An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.