Skip to content
OpenAdvisories

Archive

29 October 2018

Vulnerabilities first published on this day (UTC), newest first.

← September 2018 2018 / October /29 November 2018 →
  1. 151
  2. 278
  3. 340
  4. 429
  5. 5134
  6. 62
  7. 76
  8. 848
  9. 958
  10. 10110
  11. 1116
  12. 12114
  13. 13 
  14. 144
  15. 1533
  16. 1625
  17. 17262
  18. 1862
  19. 1942
  20. 202
  21. 214
  22. 2214
  23. 2369
  24. 2435
  25. 257
  26. 2637
  27. 2715
  28. 2840
  29. 2954
  30. 3040
  31. 3142
All Critical High Medium Low Exploited only Public exploit

54 results · Feed

  • Unscored —
    CVE-2018-18790

    An issue was discovered in zzcms 8.3. SQL Injection exists in admin/special_add.php via a zxbigclassid cookie. (This ne…

  • Unscored —
    CVE-2018-18788

    An issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the tablename parameter. (This …

  • Unscored —
    CVE-2018-18784

    An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. (This nee…

  • Unscored —
    CVE-2018-18789

    An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php.

  • Unscored —
    CVE-2018-18782

    Reflected XSS exists in DedeCMS 5.7 SP2 via the /member/myfriend.php ftype parameter.

  • Unscored —
    CVE-2018-18787

    An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie.

  • Unscored —
    CVE-2018-18785

    An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php.

  • Unscored —
    CVE-2018-18792

    An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs_list.php via a pxzs cookie.

  • Unscored —
    CVE-2018-18783

    XSS was discovered in SEMCMS V3.4 via the semcms_remail.php?type=ok umail parameter.

  • Unscored —
    CVE-2018-18791

    An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie.

  • Unscored —
    CVE-2018-18781

    DedeCMS 5.7 SP2 allows XSS via the /member/uploads_select.php f or keyword parameter.

  • Unscored —
    CVE-2018-18786

    An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie.

  • Unscored —
    CVE-2018-18771

    An issue was discovered in LuLu CMS through 2015-05-14. backend\modules\filemanager\controllers\DefaultController.php a…

  • Unscored —
    CVE-2018-18778 Public exploit Scanner template EPSS 71%

    ACME mini_httpd before 1.30 lets remote users read arbitrary files.

    mini-httpd mini-httpd mini_httpd Debian Ubuntu Alpine