Archive
24 October 2018
Vulnerabilities first published on this day (UTC), newest first.
35 results · Feed
-
Unscored —
ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service (menu functionality los…
-
Unscored —
AudioCodes 440HD and 450HD devices 3.1.2.89 and earlier allows man-in-the-middle attackers to obtain sensitive credenti…
-
Unscored —
The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive p…
-
Unscored —
ServersCheck Monitoring Software through 14.3.3 has Persistent and Reflected XSS via the sensors.html status parameter,…
-
Unscored —
A command injection vulnerability in the setup API in the Neato Botvac Connected 2.2.0 allows network attackers to exec…
-
Unscored —
Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credenti…
-
Unscored —
CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-M…
-
Unscored —
SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that may allow an attacker to force-pai…
-
Unscored —
SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access t…
-
Unscored —
SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery.
-
Unscored —
The server API in the Anda app relies on hardcoded credentials.
-
Unscored —
The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installati…
-
Critical 9.8
SaltStack Salt Remote command execution and incorrect access control when using salt-api
SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).
-
Medium 5.3
SaltStack Salt Directory Traversal vulnerability in salt-api
Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.
-
Medium 4.8
* Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands…
-
Unscored —
Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x befo…
-
Critical 9.8
mysql-bunuuid-rails vulnerable to SQL injection
mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns.
-
Medium 6.1CVE-2018-18548 Public exploit
Ajenti Cross-site Scripting Via Filename
ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.
-
Unscored —
www/guis/admin/application/controllers/UserController.php in the administration login interface in MailCleaner CE 2018.…
-
Unscored —
Vesta Control Panel through 0.9.8-22 has XSS via the edit/web/ domain parameter, the list/backup/ backup parameter, the…
-
Unscored —
* Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated …
-
Unscored —
XSS exists in cgi-bin/webcm on D-link DSL-2640T routers via the var:RelaodHref or var:conid parameter.
-
Unscored —CVE-2018-12650 Public exploit
Adrenalin HRMS version 5.4.0 contains a Reflected Cross Site Scripting (XSS) vulnerability in the ApplicationtEmployeeS…
-
Unscored —
An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the SNMP version 3 user's password. T…
-
Unscored —
An issue was discovered on Eaton UPS 9PX 8000 SP devices. The administration panel is vulnerable to a CSRF attack on th…
-
Unscored —
An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the user's password. The web page dis…
-
Unscored —
An uncontrolled search path element (DLL Hijacking) vulnerability has been identified in Fuji Electric Energy Savings E…
-
Unscored —
An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. …
-
Unscored —
An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. …
-
Unscored —
In Apache Impala before 3.0.1, ALTER TABLE/VIEW RENAME required ALTER on the old table. This may pose a potential secur…
-
Unscored —
Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inje…
-
High 7.8
Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability
A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied paramet…
-
Medium 5.4
IBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting. This vulnerability allows users…
-
Unscored —
All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and …
-
High 7.5
Improper Input Validation in Apache Spark
Spark's Apache Maven-based build includes a convenience script, 'build/mvn', that downloads and runs a zinc server to speed up compilation. It has been included in release branches since 1.3.x, up to and including master. This server will accept connections f…