Skip to content
OpenAdvisories

Archive

28 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /28 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

40 results · Feed

  • Unscored —
    CVE-2018-18765

    An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose …

    smplayer Debian
  • Unscored —
    CVE-2018-18764

    An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose …

    smplayer smplayer Debian Ubuntu
  • Unscored —
    CVE-2018-18752

    Webiness Inventory 2.3 suffers from an Arbitrary File upload vulnerability via PHP code in the protected/library/ajax/W…

  • Unscored —
    CVE-2018-18754

    ZyXEL VMG3312-B10B 1.00(AAPP.7) devices have a backdoor root account with the tTn3+Z@!Sr0O+ password hash in the etc/de…

  • Unscored —
    CVE-2018-18753

    Typecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data, as demonstrated by SSRF.

  • Unscored —
    CVE-2018-18751

    An issue was discovered in GNU gettext 0.19.8. There is a double free in default_add_message in read-catalog.c, related…

    gettext gettext gettext Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-18744

    An XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMS_Main.php URI.

  • Unscored —
    CVE-2018-18735

    A CSRF issue was discovered in admin/Index/tiquan in catfish blog 2.0.33.

  • Unscored —
    CVE-2018-18738

    An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Categories.php?pid=1&lgid=1 category_key parameter.

  • Unscored —
    CVE-2018-18742

    A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_User.php?Class=add&CF=user URI.

  • Unscored —
    CVE-2018-18740

    An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMS_Link.php?lgid=1 URI.

  • Unscored —
    CVE-2018-18737

    An XXE issue was discovered in Douchat 4.0.4 because Data\notify.php calls simplexml_load_string. This can also be used…

  • Unscored —
    CVE-2018-18733

    An XSS issue was discovered in Catfish CMS 4.8.30, related to "write source code," a similar issue to CVE-2018-13999.

  • Unscored —
    CVE-2018-18749

    data-tools through 2017-07-26 has an Integer Overflow leading to an incorrect end value for the write_wchars function.

  • Unscored —
    CVE-2018-18734

    A CSRF issue was discovered in admin/Index/addmanageuser.html in Catfish CMS 4.8.30.

  • Unscored —
    CVE-2018-18736

    An XSS issue was discovered in catfish blog 2.0.33, related to "write source code."

  • Unscored —
    CVE-2018-18745

    An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Menu.php?lgid=1 during editing.

  • Unscored —
    CVE-2018-18748

    Sandboxie 5.26 allows a Sandbox Escape via an "import os" statement, followed by os.system("cmd") or os.system("powersh…

  • Unscored —
    CVE-2018-18739

    An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Products.php?lgid=1 Keywords field.

  • Unscored —
    CVE-2018-18741

    An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Download.php?lgid=1 during editing.

  • Unscored —
    CVE-2018-18743

    An XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin/SEMCMS_Categories.php?pid=1&lgid=1 URI.

  • Unscored —
    CVE-2016-10732

    ProjectSend (formerly cFTP) r582 allows authentication bypass via a direct request for users.php, home.php, edit-file.p…

  • Unscored —
    CVE-2016-10734

    ProjectSend (formerly cFTP) r582 allows Insecure Direct Object Reference via includes/actions.log.export.php.

  • Unscored —
    CVE-2016-10733

    ProjectSend (formerly cFTP) r582 allows directory traversal via file=../ in the process-zip-download.php query string.

  • Unscored —
    CVE-2016-10731

    ProjectSend (formerly cFTP) r582 allows SQL injection via manage-files.php with the request parameter status, manage-fi…

  • Unscored —
    CVE-2018-18720

    An XSS issue was discovered in index.php/admin/system/basic in YUNUCMS 1.1.5.

  • Unscored —
    CVE-2018-18728

    An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN device…

  • Unscored —
    CVE-2018-18718

    An issue was discovered in gThumb through 3.6.2. There is a double-free vulnerability in the add_themes_from_dir method…

    gthumb gthumb Debian Ubuntu
  • Unscored —
    CVE-2018-18725

    An XSS issue was discovered in admin/banner/editbanner?id=20 in YUNUCMS 1.1.5.

  • Unscored —
    CVE-2018-18717

    An issue was discovered in Eleanor CMS through 2015-03-19. XSS exists via the ajax.php?direct=admin&file=autocomplete&q…

  • Unscored —
    CVE-2018-18731

    An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.1…

  • Unscored —
    CVE-2018-18729

    An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.1…

  • Unscored —
    CVE-2018-18726

    An XSS issue was discovered in admin/sitelink/editsitelink?id=16 in YUNUCMS 1.1.5.

  • Unscored —
    CVE-2018-18724

    An XSS issue was discovered in index.php/admin/category/editcategory?id=73 in YUNUCMS 1.1.5.

  • Unscored —
    CVE-2018-18723

    An XSS issue was discovered in index.php/admin/area/editarea/id/110000 in YUNUCMS 1.1.5.

  • Unscored —
    CVE-2018-18727

    An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.1…

  • Unscored —
    CVE-2018-18730

    An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.1…

  • Unscored —
    CVE-2018-18721

    An XSS issue was discovered in admin/link/editlink?id=5 in YUNUCMS 1.1.5.

  • Unscored —
    CVE-2018-18732

    An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.1…

  • Unscored —
    CVE-2018-18722

    An XSS issue was discovered in admin/content/editcontent?id=29&gopage=1 in YUNUCMS 1.1.5.