Archive
September 2018
Vulnerabilities first published in this month (UTC), newest first.
1,170 results · Feed
-
Unscored —
The newsfeed (aka /index.php?page=viewnews) in BTITeam XBTIT 2.5.4 has stored XSS via the title of a news item. This is…
-
Unscored —
An issue was discovered in BTITeam XBTIT 2.5.4. The hashed passwords stored in the xbtit_users table are stored as unsa…
-
Unscored —CVE-2018-15918 Public exploit
An issue was discovered in Jorani 0.6.5. SQL Injection (error-based) allows a user of the application without permissio…
-
Unscored —
An issue was discovered in BTITeam XBTIT. Due to a lack of cross-site request forgery protection, it is possible to aut…
-
Unscored —
An issue was discovered in BTITeam XBTIT 2.5.4. The "keywords" parameter in the search function available at /index.php…
-
Unscored —
An issue was discovered in BTITeam XBTIT. PHP error logs are stored in an open directory (/include/logs) using predicta…
-
Unscored —
Persistent cross-site scripting (XSS) issues in Jorani 0.6.5 allow remote attackers to inject arbitrary web script or H…
-
Unscored —
An issue was discovered in BTITeam XBTIT 2.5.4. When a user logs in, their password hash is rehashed using a predictabl…
-
Unscored —
An issue was discovered in BTITeam XBTIT. By using String.replace and eval, it is possible to bypass the includes/crk_p…
-
Unscored —
An issue was discovered in BTITeam XBTIT. The "returnto" parameter of the login page is vulnerable to an open redirect …
-
Unscored —
An issue was discovered in BTITeam XBTIT 2.5.4. The "act" parameter in the sign-up page available at /index.php?page=si…
-
Unscored —
VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the…
-
Unscored —
VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eve…
-
Unscored —
VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF.
-
Unscored —
Gxlcms 2.0 before bug fix 20180915 has SQL Injection exploitable by an administrator.
-
Unscored —
Gxlcms 2.0 before bug fix 20180915 has Directory Traversal exploitable by an administrator.
-
Unscored —
Amcrest networked devices use the same hardcoded SSL private key across different customers' installations, which allow…
-
Unscored —
Kaizen Asset Manager (Enterprise Edition) and Training Manager (Enterprise Edition) allow a remote attacker to achieve …
-
High 7.5CVE-2018-14618 EPSS 11%
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Cur…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checki…
-
Unscored —
In Artifex Ghostscript before 9.24, gssetresolution and gsgetresolution allow attackers to have an unspecified impact.
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files to the builtin PDF14 converter co…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use insufficient interprete…
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect free logic in…
-
Unscored —
This module enables you to create fields for storing decimal values as two integers (numerator and denominator) for max…
-
Unscored —
Pidgin version <2.11.0 contains a vulnerability in X.509 Certificates imports specifically due to improper check of ret…
-
Medium 5.3
ReDoS via long string of semicolons in tough-cookie
NodeJS Tough-Cookie version 2.2.2 contains a Regular Expression Parsing vulnerability in HTTP request Cookie Header parsing that can result in Denial of Service. This attack appear to be exploitable via Custom HTTP header passed by client. This vulnerability …
-
Unscored —
A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limit…
-
Unscored —
An XML External Entity (XXE) vulnerability exists in HTML Form Entry 3.7.0, as distributed in OpenMRS Reference Applica…
-
Medium 6.1
Flask-Admin Cross-site Scripting vulnerability
helpers.py in Flask-Admin 1.5.2 has Reflected XSS via a crafted URL.
-
Unscored —
In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use a type confusion in the…
-
Unscored —
An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with a…
-
Unscored —
A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be p…
-
Unscored —
A plaintext recovery of encrypted messages or a Man-in-the-middle (MiTM) attack on RSA PKCS #1 v1.5 encryption may be p…
-
Unscored —
An issue was discovered in zsh before 5.6. The beginning of a #! script file was mishandled, potentially leading to an …
-
Unscored —
An issue was discovered in zsh before 5.6. Shebang lines exceeding 64 characters were truncated, potentially leading to…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. A type confusion in "ztype" could be used by remote attacke…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect "restoration of privilege" checking during handli…
-
Unscored —
An issue was discovered in Artifex Ghostscript before 9.24. Incorrect exec stack handling in the "CS" and "SC" PDF prim…
-
Unscored —
In FreeBSD before 11.1-STABLE, 11.2-RELEASE-p2, 11.1-RELEASE-p13, ip fragment reassembly code is vulnerable to a denial…