Archive
September 2018
Vulnerabilities first published in this month (UTC), newest first.
1,170 results · Feed
-
Unscored —
A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentia…
-
Unscored —
Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an …
-
Unscored —
Privilege escalation in file permissions in Intel Computing Improvement Program before version 2.2.0.03942 may allow an…
-
Unscored —
A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0…
-
Unscored —
Multiple buffer overflows in Intel AMT in Intel CSME firmware versions before version 12.0.5 may allow a privileged use…
-
Unscored —
Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0…
-
Unscored —
Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to pot…
-
Unscored —
A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version …
-
Unscored —
A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters m…
-
Unscored —
A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Manag…
-
Unscored —
Multiple memory leaks in Intel AMT in Intel CSME firmware versions before 12.0.5 may allow an unauthenticated user with…
-
Unscored —
Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remot…
-
Unscored —
razorCMS 3.4.7 allows Stored XSS via the keywords of the homepage within the settings component.
-
Unscored —
D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page.
-
Unscored —
feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new.
-
Unscored —
e107_admin/banlist.php in e107 2.1.8 allows SQL injection via the old_ip parameter.
-
Unscored —
Pluck 4.7.7 allows XSS via an SVG file that contains Javascript in a SCRIPT element, and is uploaded via pages->manage …
-
Unscored —
razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component.
-
Unscored —
e107_web/js/plupload/upload.php in e107 2.1.8 allows remote attackers to execute arbitrary PHP code by uploading a .php…
-
Unscored —
Pulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when configured to authenticate VPN users during Windows Logon, can a…
-
Unscored —
An issue was discovered in the Self Service Portal in Zoho ManageEngine Desktop Central before 10.0.282. A clickable co…
-
Unscored —
An issue was discovered in Zoho ManageEngine Desktop Central before 10.0.282. A clickable company logo in a window runn…
-
Unscored —
In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/…
-
Unscored —
Insecure permissions in Lone Wolf Technologies loadingDOCS 2018-08-13 allow remote attackers to download any confidenti…
-
Unscored —
Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vu…
-
Unscored —
Huawei B315s-22 products with software of 21.318.01.00.26 have an information leak vulnerability. Unauthenticated adjac…
-
Unscored —
Some Huawei smart phones with software of Leland-AL00 8.0.0.114(C636), Leland-AL00A 8.0.0.171(C00) have a denial of ser…
-
Unscored —
Huawei ALP-L09 smart phones with versions earlier than ALP-L09 8.0.0.150(C432) have an insufficient input validation vu…
-
Unscored —
Huawei smart phones G9 Lite, Honor 5A, Honor 6X, Honor 8 with the versions before VNS-L53C605B120CUSTC605D103, the vers…
-
Unscored —
In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p3, 11.1-RELEASE-p14, 10.4-STABLE, and 10.4-RELEASE-p12, insufficient valid…
-
Unscored —
Incorrect access control in RDP Level 1 on STMicroelectronics STM32F0 series devices allows physically present attacker…
-
Medium 4.3
IBM Datacap Fastdoc Capture 9.1.1, 9.1.3, and 9.1.4 could allow an authenticated user to bypass future authentication m…
-
Unscored —
A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021). Improper access co…
-
Unscored —
A vulnerability has been identified in SIEMENS TD Keypad Designer (All versions). A DLL hijacking vulnerability exists …
-
Unscored —
A vulnerability has been identified in SCALANCE X300 (All versions < V4.0.0), SCALANCE X408 (All versions < V4.0.0), SC…
-
Medium 5.4
An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web r…
-
Medium 5.4
An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web r…
-
Medium 5.4
An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web r…
-
Medium 5.4
An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web r…
-
Unscored —
In FreeBSD 11.x before 11.1-RELEASE and 10.x before 10.4-RELEASE, the qsort algorithm has a deterministic recursion pat…