Skip to content
OpenAdvisories

Archive

3 October 2018

Vulnerabilities first published on this day (UTC), newest first.

5 results · Clear filters · Feed

  • Unscored —
    CVE-2018-17428 Public exploit

    An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio pa…

  • Unscored —
    CVE-2018-17553 Public exploit EPSS 79%

    An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs …

  • Unscored —
    CVE-2018-17552 Public exploit EPSS 84%

    SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the naviga…

  • Unscored —
    CVE-2018-17408 Public exploit EPSS 19%

    Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute …

  • Unscored —
    CVE-2017-2751 Public exploit

    A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others.…