Archive
September 2018
Vulnerabilities first published in this month (UTC), newest first.
1,170 results · Feed
-
Unscored —
In Ice Qube Thermal Management Center versions prior to version 4.13, passwords are stored in plaintext in a file that …
-
Unscored —
In Ice Qube Thermal Management Center versions prior to version 4.13, the web application does not properly authenticat…
-
Unscored —
okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" …
-
Unscored —CVE-2018-1000671 Scanner template
sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in…
-
Unscored —
TOCK version prior to commit 42f7f36e74088036068d62253e1d8fb26605feed. For example dfde28196cd12071fcf6669f7654be7df482…
-
Unscored —
GIG Technology NV JumpScale Portal 7 version before commit 15443122ed2b1cbfd7bdefc048bf106f075becdb contains a CWE-78: …
-
Unscored —
LimeSurvey version 3.14.4 and earlier contains a directory traversal in file upload that allows upload of webshell vuln…
-
Unscored —
jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.…
-
Medium 6.1
Improper Neutralization of Input During Web Page Generation in Dojo Dojo Objective Harness
Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and testsDOH/_base/i18nExhaustive.js in the DOH that can result in V…
-
Unscored —
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get…
-
Unscored —
LimeSurvey version prior to 3.14.4 contains a file upload vulnerability in upload functionality that can result in an a…
-
Unscored —
jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can…
-
Unscored —
jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function _jsi_evalcode from jsiEval.c that can r…
-
Unscored —
daneren2005 DSub for Subsonic (Android client) version 5.4.1 contains a CWE-295: Improper Certificate Validation vulner…
-
Unscored —
NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handl…
-
Unscored —CVE-2018-16606 Public exploit
In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted pape…
-
Unscored —
An issue was discovered in Nibbleblog v4.0.5. With an admin's username and password, an attacker can execute arbitrary …
-
Unscored —
WordPress version 4.9.8 and earlier contains a CWE-20 Input Validation vulnerability in thumbnail processing that can r…
-
Unscored —
In all Android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the Linux kernel, radio_id is…
-
High 7.3
IBM WebSphere Application Server 7.0, 8.0, and 8.5.5 installations using Form Login could allow a remote attacker to co…
-
Medium 6.1
Cross-Site Scripting in exceljs
An unescaped payload in exceljs <v1.6 allows a possible XSS via cell value when worksheet is displayed in browser.
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. The .setdistillerkeys PostScript command is accepted even t…
-
High 7.5
A vulnerability was discovered in 389-ds-base through versions 1.3.7.10, 1.3.8.8 and 1.4.0.16. The lock controlling the…
-
High 7.7
JSON-Patch Out-of-bounds Write vulnerability
An out of bound write can occur when patching an Openshift object using the 'oc patch' functionality in OpenShift Container Platform before 3.7. An attacker can use this flaw to cause a denial of service attack on the Openshift master api service which provid…
-
Unscored —
WordPress version <4.9 contains a CWE-20 Input Validation vulnerability in thumbnail processing that can result in remo…
-
Unscored —
TeamViewer 10.x through 13.x allows remote attackers to bypass the brute-force authentication protection mechanism by s…
-
High 8.8
MicroPyramid Django-CRM CSRF
MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs.
-
Medium 5.4
Stored XSS in LavaLite 5.5
LavaLite 5.5 has XSS via a /edit URI, as demonstrated by client/job/job/Zy8PWBekrJ/edit.
-
Critical 9.8
Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload
The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and write arbitrary files using directory traversal techniques. An attacker can exploit this vulnerabil…
-
Unscored —CVE-2018-16144 EPSS 33%
The test connection functionality in the NetAudit section of Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vul…
-
Unscored —
The diagnosticsb2ksy parameter of the /rest endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulnerab…
-
Unscored —CVE-2018-16252 Public exploit
FsPro Labs Event Log Explorer 4.6.1.2115 has ".elx" FileType XML External Entity Injection.
-
Unscored —
HScripts PHP File Browser Script v1.0 allows Directory Traversal via the index.php path parameter.
-
Unscored —
An "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi_55DD Version 2.8.50 devices. It is possible…
-
Unscored —
An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_…
-
Unscored —
An issue was discovered in BTITeam XBTIT 2.5.4. news.php allows XSS via the id parameter.
-
Unscored —
The data parameter of the /settings/api/router endpoint in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 is vulne…
-
Unscored —
The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before…
-
Unscored —
The web management console of Opsview Monitor 5.4.x before 5.4.2 provides functionality accessible by an authenticated …
-
Unscored —
e107 2.1.8 has XSS via the e107_admin/users.php?mode=main&action=list user_loginname parameter.