Archive
23 October 2018
Vulnerabilities first published on this day (UTC), newest first.
69 results · Feed
-
Unscored —CVE-2018-18475 EPSS 20%
Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload.
-
Unscored —CVE-2018-18437 Public exploit
In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error_Desc paramet…
-
Unscored —
An issue was discovered in Daniel Gultsch Conversations 2.3.4. It is possible to spoof a custom message to an existing …
-
Unscored —
Telligent Community 6.x, 7.x, 8.x, 9.x before 9.2.10.11796, 10.1.x before 10.1.10.11792, and 10.2.x before 10.2.3.4725 …
-
Unscored —
A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 (v8839a1) and earlier, could …
-
Unscored —
Directory traversal vulnerability in the Splunk Django App in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.1…
-
Unscored —
Splunkd in Splunk Enterprise 6.2.x before 6.2.14 6.3.x before 6.3.11, and 6.4.x before 6.4.8; and Splunk Light before 6…
-
Unscored —
Splunk Enterprise 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Ligh…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6…
-
Unscored —
A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is pre…
-
Unscored —
An Incorrect Access Control issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10…
-
Unscored —
An Information Exposure Through Log Files issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x befor…
-
Unscored —
A SQL Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x before …
-
Unscored —
A Directory Traversal issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x b…
-
Unscored —CVE-2018-17445 EPSS 11%
A Command Injection issue was discovered in Citrix SD-WAN 10.1.0 and NetScaler SD-WAN 9.3.x before 9.3.6 and 10.0.x bef…
-
Unscored —
A gambling smart contract implementation for RuletkaIo, an Ethereum gambling game, generates a random value that is pre…
-
Unscored —CVE-2018-17873 Public exploit
An incorrect access control vulnerability in the FTP configuration of WiFiRanger devices with firmware version 7.0.8rc3…
-
Unscored —
A vulnerability in the conferencing component of Mitel ST 14.2, versions GA29 (19.49.9400.0) and earlier, could allow a…
-
Unscored —
The Mitel MiVoice 5330e VoIP device is affected by memory corruption flaws in the SIP/SDP packet handling functionality…
-
Critical 9.8
Deserialization of Untrusted Data in Pippo
An issue was discovered in Pippo 1.11.0. The function SerializationSessionDataTranscoder.decode() calls ObjectInputStream.readObject() to deserialize a SessionData object without checking the object types. An attacker can create a malicious object, base64 enc…
-
Unscored —
Advantech WebAccess 8.3.1 and earlier has an improper privilege management vulnerability, which may allow an attacker t…
-
Unscored —
Advantech WebAccess 8.3.1 and earlier has a path traversal vulnerability which may allow an attacker to execute arbitra…
-
Unscored —
Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path…
-
Unscored —
Advantech WebAccess 8.3.1 and earlier has several stack-based buffer overflow vulnerabilities that have been identified…
-
Critical 9.8
Improper Input Validation in alilibaba:fastjson
parseObject in Fastjson before 1.2.25, as used in FastjsonEngine in Pippo 1.11.0 and other products, allows remote attackers to execute arbitrary code via a crafted JSON request, as demonstrated by a crafted rmi:// URI in the dataSourceName field of HTTP POST…
-
Unscored —
An issue was discovered in PHPYun V4.6. There is a vulnerability that can delete any file or directory via the "admin/i…
-
Unscored —CVE-2018-18608 Scanner template
DedeCMS 5.7 SP2 allows XSS via the function named GetPageList defined in the include/datalistcp.class.php file that is …
-
Unscored —
An issue was discovered in Waimai Super Cms 20150505. There is XSS via the index.php?m=public&a=doregister username par…
-
Unscored —
A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File …
-
Unscored —
An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbf…
-
Medium 6.3
MFSBGN03827 rev.1 - Microfocus Real User Monitoring 9.4.0 BPRDownload Java Deserialization Vulnerability
A potential Remote Arbitrary Code Execution vulnerability has been identified in Micro Focus' Real User Monitoring software, versions 9.26IP, 9.30, 9.40 and 9.50. The vulnerability could be exploited to execute arbitrary code.
-
Unscored —
An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as…
-
Unscored —CVE-2018-8569 EPSS 13%
A remote code execution vulnerability exists in the Yammer desktop application due to the loading of arbitrary content,…
-
Unscored —
360 Total Security 3.5.0.1033 allows a Sandbox Escape via an "import os" statement, followed by os.system("CMD") or os.…
-
Unscored —
Stegdetect through 2018-05-26 has an out-of-bounds write in f5_compress in the f5.c file.
-
High 7.8
Ansible Leaks Data Passed to ssh-keygen
Ansible "User" module leaks any data which is passed on as a parameter to ssh-keygen. This could lean in undesirable situations such as passphrases credentials passed as a parameter for the ssh-keygen executable. Showing those credentials in clear text form f…
-
Unscored —
A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consume…
-
Unscored —
A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consume…
-
Unscored —
A KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consume…
-
Unscored —
Some Huawei smart phones ALP-AL00B 8.0.0.106(C00), 8.0.0.113(SP2C00), 8.0.0.113(SP3C00), 8.0.0.113(SP7C00), 8.0.0.118(C…