Skip to content
OpenAdvisories

Archive

October 2018

Vulnerabilities first published in this month (UTC), newest first.

89 results · Clear filters · Feed

  • Unscored —
    CVE-2017-2751 Public exploit

    A BIOS password extraction vulnerability has been reported on certain consumer notebooks with firmware F.22 and others.…

  • Unscored —
    CVE-2018-9493 Public exploit

    In the content provider of the download manager, there is a possible SQL injection due to improper input validation. Th…

  • Unscored —
    CVE-2018-9515 Public exploit

    In sdcardfs_create and sdcardfs_mkdir of inode.c, there is a possible memory corruption due to improper locking. This c…

  • Unscored —
    CVE-2018-17593 Public exploit

    AirTies Air 5453 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

  • Unscored —
    CVE-2018-17591 Public exploit

    AirTies Air 5343v2 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

  • Unscored —
    CVE-2018-17588 Public exploit

    AirTies Air 5021 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

  • Unscored —
    CVE-2018-17590 Public exploit

    AirTies Air 5442 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

  • Unscored —
    CVE-2018-17587 Public exploit

    AirTies Air 5750 devices with software 1.0.0.18 have XSS via the top.html productboardtype parameter.

  • Unscored —
    CVE-2018-17832 Public exploit

    XSS exists in WUZHI CMS 2.0 via the index.php v or f parameter.