Archive
September 2018
Vulnerabilities first published in this month (UTC), newest first.
87 results · Clear filters · Feed
-
Unscored —
Python Software Foundation Python (CPython) version 2.7 contains a CWE-77: Improper Neutralization of Special Elements …
-
Unscored —
It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vuln…
-
Medium 5.3CVE-2018-8041 Public exploit
Apache Camel's Mail is vulnerable to path traversal
Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal.
-
Unscored —
A Persistent XSS issue was discovered in the Visual Editor in MyBB before 1.8.19 via a Video MyCode.
-
Unscored —
LG SuperSign CMS allows TVs to be rebooted remotely without authentication via a direct HTTP request to /qsr_server/dev…
-
Unscored —
LG SuperSign CMS allows reading of arbitrary files via signEzUI/playlist/edit/upload/..%2f URIs.
-
High 7.5
High severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua
Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.
-
Unscored —CVE-2018-10763 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (…
-
Unscored —CVE-2018-10814 Public exploit
Synametrics SynaMan 4.0 build 1488 uses cleartext password storage for SMTP credentials.
-
Critical 9.8
TCPDF vulnerable to attackers triggering deserialization of arbitrary data
An issue was discovered in TCPDF before 6.2.22. Attackers can trigger deserialization of arbitrary data via the phar:// wrapper.
-
Unscored —CVE-2018-16987 Public exploit
Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstr…
-
Unscored —
A remote code execution vulnerability exists when the Microsoft XML Core Services MSXML parser processes user input, ak…
-
High 7.8
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…
KEV Mar 28, 2022 -
Unscored —
A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted mess…
-
Unscored —CVE-2018-8449 Public exploit
A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka "Device Guard Security …
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCon…
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCon…
-
High 7.5
ChakraCore RCE Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…
-
Unscored —
An elevation of privilege vulnerability exists when Windows, allowing a sandbox escape, aka "Windows Elevation of Privi…
-
High 7.5
Denial of service in ASP.NET Core
A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.
-
Unscored —CVE-2018-8410 Public exploit
An elevation of privilege vulnerability exists when the Windows Kernel API improperly handles registry objects in memor…
-
Unscored —
Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. Unauthenticated adjac…
-
Unscored —
In FreeBSD before 11.2-RELEASE, multiple issues with the implementation of the stack guard-page reduce the protections …
-
Unscored —CVE-2017-1085 Public exploit
In FreeBSD before 11.2-RELEASE, an application which calls setrlimit() to increase RLIMIT_STACK may turn a read-only me…
-
Unscored —CVE-2018-16946 Public exploit
LG LNB*, LND*, LNU*, and LNV* smart network camera devices have broken access control. Attackers are able to download /…
-
Unscored —
Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated atta…
-
Unscored —
FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This c…
-
Unscored —CVE-2018-16736 Public exploit
In the rcfilters plugin 2.1.6 for Roundcube, XSS exists via the _whatfilter and _messages parameters (in the Filters se…
-
Unscored —
Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename pa…
-
Unscored —CVE-2018-12897 Public exploit
SolarWinds DameWare Mini Remote Control before 12.1 has a Buffer Overflow.
-
High 7.5
IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 is vulnerable to SQL injection. A remote attacker c…
-
Unscored —CVE-2018-16517 Public exploit
asm/labels.c in Netwide Assembler (NASM) is prone to NULL Pointer Dereference, which allows the attacker to cause a den…
-
Unscored —CVE-2018-12234 Public exploit
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied…
-
Unscored —
The Linux kernel, versions 3.9+, IP implementation is vulnerable to denial of service conditions with low rates of specially modified packets
The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various…
-
Unscored —CVE-2018-16606 Public exploit
In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted pape…
-
Critical 9.8
Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload
The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. An attacker can exploit this vulnerabil…
-
Unscored —CVE-2018-16252 Public exploit
FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection.
-
Unscored —CVE-2018-15918 Public exploit
An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permissio…
-
Unscored —
Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or H…