Archive
October 2018
Vulnerabilities first published in this month (UTC), newest first.
89 results · Clear filters · Feed
-
Unscored —
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). …
-
Unscored —CVE-2018-18308 Public exploit
In the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax/file-browser/upload/ (a…
-
Unscored —CVE-2018-14772 Public exploit
Pydio 4.2.1 through 8.2.1 has an authenticated remote code execution vulnerability in which an attacker with administra…
-
Unscored —CVE-2018-17980 Public exploit
NoMachine before 5.3.27 and 6.x before 6.3.6 allows attackers to gain privileges via a Trojan horse wintab32.dll file l…
-
Unscored —CVE-2018-17961 Public exploit
Artifex Ghostscript 9.25 and earlier allows attackers to bypass a sandbox protection mechanism via vectors involving er…
-
Unscored —CVE-2018-18324 Public exploit
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has XSS via the admin/fileManager2.php fm_current_dir paramete…
-
Unscored —
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Local File Inclusion via directory traversal with an admin…
-
Unscored —
CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.480 has Command Injection via shell metacharacters in the admin/in…
-
Unscored —CVE-2018-15968 Public exploit
Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlie…
-
Unscored —
NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers…
-
Critical 9.8
Unrestricted Upload of File with Dangerous Type in blueimp-file-upload
Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0
-
Unscored —CVE-2018-17784 Public exploit
Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthenti…
-
Unscored —
Episerver Ektron CMS before 9.0 SP3 Site CU 31, 9.1 before SP3 Site CU 45, or 9.2 before SP2 Site CU 22 allows remote a…
-
Critical 9.8CVE-2018-12542 Public exploit
Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location
In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '\' (forward slashes) sequences that can resolve to a location th…
-
Unscored —
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a maliciou…
-
Unscored —
A remote code execution vulnerability exists when Windows Shell improperly handles URIs, aka "Windows Shell Remote Code…
-
High 7.8
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in…
KEV Jan 21, 2022 -
Unscored —
A remote code execution vulnerability exists when "Windows Theme API" does not properly decompress files, aka "Windows …
-
Unscored —
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing a maliciou…
-
Unscored —
An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious …
-
Unscored —CVE-2018-8411 Public exploit
An elevation of privilege vulnerability exists when NTFS improperly checks access, aka "NTFS Elevation of Privilege Vul…
-
High 7.5CVE-2018-18074 Public exploit
Insufficiently Protected Credentials in Requests
The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.
-
Unscored —
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by…
-
Unscored —CVE-2018-17775 Public exploit
Seqrite End Point Security v7.4 has "Everyone: (F)" permission for %PROGRAMFILES%\Seqrite\Seqrite, which allows local u…
-
Unscored —
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. An unrestricted file upload vulnerabil…
-
Unscored —
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. They expose an FTP server that serves …
-
Unscored —CVE-2018-17443 Public exploit
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'sitename' parameter of the Update…
-
Unscored —CVE-2018-17441 Public exploit
An issue was discovered on D-Link Central WiFi Manager before v 1.03r0100-Beta1. The 'username' parameter of the addUse…
-
Unscored —CVE-2018-1000810 Public exploit
The Rust Programming Language Standard Library version 1.29.0, 1.28.0, 1.27.2, 1.27.1, 127.0, 126.2, 126.1, 126.0 conta…
-
Unscored —
ext_find_user in eXtplorer through 2.1.2 allows remote attackers to bypass authentication via a password[]= (aka an emp…
-
Unscored —
Git before 2.14.5, 2.15.x before 2.15.3, 2.16.x before 2.16.5, 2.17.x before 2.17.2, 2.18.x before 2.18.1, and 2.19.x b…
-
Unscored —CVE-2018-13042 Public exploit
The 1Password application 6.8 for Android is affected by a Denial Of Service vulnerability. By starting the activity co…
-
Unscored —CVE-2018-0437 Public exploit
Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Privilege Escalation Vulnerability
A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vul…
-
Unscored —CVE-2018-0438 Public exploit
Cisco Umbrella Enterprise Roaming Client Privilege Escalation Vulnerability
A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vul…
-
Unscored —
Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability
A vulnerability in which the HTTP web server for Cisco Prime Infrastructure (PI) has unrestricted directory permissions could allow an unauthenticated, remote attacker to upload an arbitrary file. This file could allow the attacker to execute commands at the …
-
Medium 4.3
Apache Tomcat Open Redirect vulnerability
When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '/foo/' when the user requested '/foo') a specially crafted URL could be used to cause the redi…
-
Unscored —CVE-2018-17428 Public exploit
An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio pa…
-
Unscored —
An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs …
-
Unscored —
SQL Injection in login.php in Naviwebs Navigate CMS 2.8 allows remote attackers to bypass authentication via the naviga…
-
Unscored —
Stack-based buffer overflows in Zahir Accounting Enterprise Plus 6 through build 10b allow remote attackers to execute …