Archive
10 October 2018
Vulnerabilities first published on this day (UTC), newest first.
10 results · Clear filters · Feed
-
Unscored —CVE-2018-17784 Public exploit
Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthenti…
-
Unscored —
Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote a…
-
Critical 9.8CVE-2018-12542 Public exploit
Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location
In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (forward slashes) sequences that can resolve to a location th…
-
Unscored —
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a maliciou…
-
Unscored —
A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code…
-
High 7.8
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Jan 21, 2022 -
Unscored —
A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows …
-
Unscored —
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a maliciou…
-
Unscored —
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious …
-
Unscored —CVE-2018-8411 Public exploit
An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vul…