Skip to content
OpenAdvisories

Archive

28 September 2018

Vulnerabilities first published on this day (UTC), newest first.

← August 2018 2018 / September /28 October 2018 →
  1. 120
  2. 228
  3. 331
  4. 452
  5. 554
  6. 651
  7. 765
  8. 87
  9. 97
  10. 1047
  11. 1139
  12. 1269
  13. 13104
  14. 1431
  15. 159
  16. 1626
  17. 1738
  18. 1878
  19. 1957
  20. 2043
  21. 2163
  22. 226
  23. 2316
  24. 2427
  25. 2554
  26. 2663
  27. 2715
  28. 2862
  29. 292
  30. 306
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Unscored —
    CVE-2018-17776 Public exploit

    PCProtect Anti-Virus v4.8.35 has "Everyone: (F)" permission for %PROGRAMFILES(X86)%\PCProtect, which allows local users…

  • Unscored —
    CVE-2018-9075 Public exploit

    Iomega and LenovoEMC NAS Web UI Vulnerabilities

    For some Iomega, Lenovo, LenovoEMC NAS devices versions 4.1.402.34662 and earlier, when joining a PersonalCloud setup, an attacker can craft a command injection payload using backtick "``" characters in the client:password parameter. As a result, arbitrary co…

    Lenovo LenovoEMC Iomega StorCenter EZ Media and Backup Center
  • Unscored —
    CVE-2018-15365 Public exploit

    A Reflected Cross-Site Scripting (XSS) vulnerability in Trend Micro Deep Discovery Inspector 3.85 and below could allow…

    Trend Micro Trend Micro Deep Discovery Inspector
  • Unscored —
    CVE-2018-16659 Public exploit

    An issue was discovered in Rausoft ID.prove 2.95. The login page allows SQL injection via Microsoft SQL Server stacked …

  • Unscored —
    CVE-2018-17376 Public exploit

    SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filter_order_Dir, cat, or filte…

  • Unscored —
    CVE-2018-17394 Public exploit

    SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter.

  • Unscored —
    CVE-2018-17377 Public exploit

    SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter.

  • Unscored —
    CVE-2018-17383 Public exploit

    SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir par…

  • Unscored —
    CVE-2018-17375 Public exploit

    SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter.

  • Unscored —
    CVE-2018-17378 Public exploit

    SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order …

  • Unscored —
    CVE-2018-17391 Public exploit

    SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.

  • Unscored —
    CVE-2018-17397 Public exploit

    SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter.

  • Unscored —
    CVE-2018-17385 Public exploit

    SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat], radius[lng], or radius[radi…

  • Unscored —
    CVE-2018-17382 Public exploit

    SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter.

  • Unscored —
    CVE-2018-17380 Public exploit

    SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the start_date, m_start_date, or m_…

  • Unscored —
    CVE-2018-17379 Public exploit

    SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order paramet…

  • Unscored —
    CVE-2018-17384 Public exploit

    SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filter_order_Dir or filter_order parameter.