Archive
17 October 2018
Vulnerabilities first published on this day (UTC), newest first.
262 results · Feed
-
Unscored —
Anne-AL00 Huawei phones with versions earlier than 8.0.0.151(C00) have an information leak vulnerability. Due to improp…
-
Unscored —
The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00…
-
Unscored —
In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been di…
-
Unscored —
Zoho ManageEngine OpManager 12.3 before build 123214 has XSS.
-
Unscored —
A Stored XSS vulnerability has been discovered in KAASoft Library CMS - Powerful Book Management System 2.1.1 via the /…
-
Unscored —
An authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core Update 124 in backup.cgi. T…
-
Unscored —
Aryanic HighPortal 12.5 has XSS via an Add Tags action.
-
Unscored —
vBulletin 5.4.3 has an Open Redirect.
-
Unscored —
Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L …
-
Unscored —
An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.0…
-
Unscored —
An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2…
-
Unscored —CVE-2018-7076 EPSS 12%
A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E…
-
Unscored —
A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework (SGF) …
-
Unscored —
A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. Speci…
-
Critical 9.1
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client cou…
-
Unscored —
JTBC(PHP) 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action&action=add URI.
-
Unscored —
An issue was discovered in litemall 0.9.0. Arbitrary file download is possible via ../ directory traversal in linlinjav…
-
Unscored —
s-cms 3.0 allows SQL Injection via the member/post.php 0_id parameter or the POST data to member/member_login.php.
-
Unscored —
An issue was discovered in DESTOON B2B 7.0. CSRF exists via the admin.php URI in an action=add request.
-
Unscored —
An issue was discovered in DESTOON B2B 7.0. admin\setting.inc.php has XSS via the first text box to the admin.php URI.
-
Unscored —
A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causin…
-
Unscored —
A use-after-free was discovered in the tcpbridge binary of Tcpreplay 4.3.0 beta1. The issue gets triggered in the funct…
-
Unscored —
A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremen…
-
Unscored —
s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted User-agent Disallow v…
-
Unscored —
UsualToolCMS 8.0 allows CSRF for adding a user account via the cmsadmin/a_adminx.php?x=a URI.
-
Unscored —
An issue was discovered in DESTOON B2B 7.0. admin/category.inc.php has XSS via the category[catname] parameter to the a…
-
Unscored —
An issue was discovered in DESTOON B2B 7.0. XSS exists via certain text boxes to the admin.php?moduleid=2&action=add UR…
-
Unscored —
LAquis SCADA Versions 4.1.0.3870 and prior has a path traversal vulnerability, which may allow remote code execution.
-
Unscored —
LAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read vulnerabilities, which may allow remote code …
-
Unscored —
LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote c…
-
Unscored —
LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow rem…
-
Unscored —
LAquis SCADA Versions 4.1.0.3870 and prior has several integer overflow to buffer overflow vulnerabilities, which may a…
-
Unscored —
LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input …
-
High 7.2
An exploitable operating system command injection exists in the Linksys ESeries line of routers (Linksys E1200 Firmware…
-
High 7.2
Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Versio…
-
High 7.2
Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Versio…
-
Unscored —
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). The supported version that is affected…
-
Unscored —
Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console).…
-
Unscored —
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported versio…
-
Unscored —
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…