Archive
2 October 2018
Vulnerabilities first published on this day (UTC), newest first.
78 results · Feed
-
Unscored —
On D-Link DIR-823G devices, the GoAhead configuration allows /HNAP1 Command Injection via shell metacharacters in the P…
-
Unscored —CVE-2018-17593 Public exploit
AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
-
Unscored —CVE-2018-17591 Public exploit
AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
-
Unscored —
XSS exists in admin/gb-dashboard-widget.php in the Gwolle Guestbook (gwolle-gb) plugin before 2.5.4 for WordPress via t…
-
Unscored —CVE-2018-17588 Public exploit
AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
-
Unscored —CVE-2018-17590 Public exploit
AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
-
Unscored —
On D-Link DIR-823G devices, ExportSettings.sh, upload_settings.cgi, GetDownLoadSyslog.sh, and upload_firmware.cgi do no…
-
Unscored —
In the 5.4.0 version of the Fork CMS software, HTML Injection and Stored XSS vulnerabilities were discovered via the /b…
-
Unscored —
An issue was discovered in JEESNS 1.3. The XSS filter in com.lxinet.jeesns.core.utils.XssHttpServletRequestWrapper.java…
-
Unscored —
In Zoho ManageEngine AssetExplorer, a Stored XSS vulnerability was discovered in the 6.2.0 version via the /AssetDef.do…
-
Unscored —CVE-2018-17587 Public exploit
AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
-
Unscored —
AirTies Air 5443v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
-
Unscored —
AirTies Air 5650 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.
-
Medium 6.1
Subrion CMS Stored Cross-site Scripting (XSS)
_core/admin/pages/add/ in Subrion CMS 4.2.1 has XSS via the titles[en] parameter.
-
Unscored —
An issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. Cleartext Transmissio…
-
Unscored —
An issue was discovered in the MensaMax (aka com.breustedt.mensamax) application 4.3 for Android. The use of a Hard-cod…
-
Unscored —
NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled which sets incorrect permis…
-
Unscored —
NVIDIA GeForce Experience prior to 3.15 contains a vulnerability when GameStream is enabled where limited sensitive use…
-
Low 3.7
IBM Multi-Cloud Data Encryption (MDE) 2.1 could allow an unauthorized user to manipulate data due to missing file check…
-
Medium 5.4
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This …
-
Low 3.7
IBM Security Guardium EcoSystem 10.5 does not validate, or incorrectly validates, a certificate.This weakness might all…
-
Medium 5.4
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This …
-
Medium 5.4
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This …
-
Medium 5.4
IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scr…
-
Medium 5.4
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This …
-
Medium 5.4
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This …
-
Medium 5.4
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This …
-
Medium 5.4
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This …
-
Medium 5.4
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This …
-
Medium 6.2
IBM Security Guardium EcoSystem 10.5 stores user credentials in plain in clear text which can be read by a local user. …
-
Medium 5.4
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This …
-
Medium 5.4
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This …
-
Medium 5.4
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This …
-
Medium 5.4
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This …
-
Low 3.1
path traversal in obs-service-tar_scm
A path traversal traversal vulnerability in obs-service-tar_scm of Open Build Service allows remote attackers to cause access files not in the current build. On the server itself this is prevented by confining the worker via KVM. Affected releases are openSUS…
-
Medium 5.4
IBM Rational Quality Manager (RQM) 5.0 through 5.02 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This …
-
Unscored —
BIOS Write Protection Race Condition
In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.
-
Unscored —
Dell Digital Delivery versions prior to 3.5.1 contain a DLL Injection Vulnerability. A local authenticated malicious us…