Skip to content
OpenAdvisories

Archive

19 October 2018

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2018-18428 Public exploit EPSS 11%

    TP-Link TL-SC3130 1.6.18P12_121101 devices allow unauthenticated RTSP stream access, as demonstrated by a /jpg/image.jp…

  • Unscored —
    CVE-2018-18026 Public exploit

    IMFCameraProtect.sys in IObit Malware Fighter 6.2 (and possibly lower versions) is vulnerable to a stack-based buffer o…

  • Unscored —
    CVE-2018-18417 Public exploit

    In the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input and upload sections, as …

  • Unscored —
    CVE-2018-18416 Public exploit

    LANGO Codeigniter Multilingual Script 1.0 has XSS in the input and upload sections, as demonstrated by the site_name pa…

  • Unscored —
    CVE-2018-18419 Public exploit

    Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg file…

  • Critical 10.0
    CVE-2018-4013 Public exploit

    An exploitable code execution vulnerability exists in the HTTP packet-parsing functionality of the LIVE555 RTSP server …