Archive
October 2018
Vulnerabilities first published in this month (UTC), newest first.
1,473 results · Feed
-
Unscored —
Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allows man-in-the-middle attackers to obtain sensitive credenti…
-
Unscored —
CommuniGate Pro 6.2 allows stored XSS via a message body in Pronto! Mail Composer, which is mishandled in /MIME/INBOX-M…
-
Unscored —
SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that may allow an attacker to force-pai…
-
Unscored —
SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to an attack that an attacker with physical access t…
-
Unscored —
SAGA1-L8B with any firmware versions prior to A0.10 are vulnerable to a replay attack and command forgery.
-
Unscored —
The server API in the Anda app relies on hardcoded credentials.
-
Unscored —
The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installati…
-
Critical 9.8
SaltStack Salt Remote command execution and incorrect access control when using salt-api
SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allow remote attackers to bypass authentication and execute arbitrary commands via salt-api(netapi).
-
Medium 5.3
SaltStack Salt Directory Traversal vulnerability in salt-api
Directory Traversal vulnerability in salt-api in SaltStack Salt before 2017.7.8 and 2018.3.x before 2018.3.3 allows remote attackers to determine which files exist on the server.
-
Medium 4.8
* Lack of authentication in Citrix Xen Mobile through 10.8 allows low-privileged local users to execute system commands…
-
Unscored —
Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x befo…
-
Critical 9.8
mysql-bunuuid-rails vulnerable to SQL injection
mysql-binuuid-rails 1.1.0 and earlier allows SQL Injection because it removes default string escaping for affected database columns.
-
Medium 6.1CVE-2018-18548 Public exploit
Ajenti Cross-site Scripting Via Filename
ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.
-
Unscored —
www/guis/admin/application/controllers/UserController.php in the administration login interface in MailCleaner CE 2018.…
-
Unscored —
Vesta Control Panel through 0.9.8-22 has XSS via the edit/web/ domain parameter, the list/backup/ backup parameter, the…
-
Unscored —
* Xen Mobile through 10.8.0 includes a service listening on port 5001 within its firewall that accepts unauthenticated …
-
Unscored —
XSS exists in cgi-bin/webcm on D-link DSL-2640T routers via the var:RelaodHref or var:conid parameter.
-
Unscored —CVE-2018-12650 Public exploit
Adrenalin HRMS version 5.4.0 contains a Reflected Cross Site Scripting (XSS) vulnerability in the ApplicationtEmployeeS…
-
Unscored —
An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the SNMP version 3 user's password. T…
-
Unscored —
An issue was discovered on Eaton UPS 9PX 8000 SP devices. The administration panel is vulnerable to a CSRF attack on th…
-
Unscored —
An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the user's password. The web page dis…
-
Unscored —
An uncontrolled search path element (DLL Hijacking) vulnerability has been identified in Fuji Electric Energy Savings E…
-
Unscored —
An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. …
-
Unscored —
An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. …
-
Unscored —
In Apache Impala before 3.0.1, ALTER TABLE/VIEW RENAME required ALTER on the old table. This may pose a potential secur…
-
Unscored —
Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inje…
-
High 7.8
Cisco Webex Meetings Desktop App Update Service Command Injection Vulnerability
A vulnerability in the update service of Cisco Webex Meetings Desktop App for Windows could allow an authenticated, local attacker to execute arbitrary commands as a privileged user. The vulnerability is due to insufficient validation of user-supplied paramet…
-
Medium 5.4
IBM WebSphere Commerce Enterprise V7, V8, and V9 is vulnerable to cross-site scripting. This vulnerability allows users…
-
Unscored —
All versions of Telecrane F25 Series Radio Controls before 00.0A use fixed codes that are reproducible by sniffing and …
-
High 7.5
Improper Input Validation in Apache Spark
Spark's Apache Maven-based build includes a convenience script, 'build/mvn', that downloads and runs a zinc server to speed up compilation. It has been included in release branches since 1.3.x, up to and including master. This server will accept connections f…
-
Unscored —CVE-2018-18475 EPSS 20%
Zoho ManageEngine OpManager before 12.3 build 123214 allows Unrestricted Arbitrary File Upload.
-
Unscored —CVE-2018-18437 Public exploit
In AXIOS ITALIA Axioscloud Sissiweb Registro Elettronico 1.7.0, secret/relogoff.aspx has XSS via the Error_Desc paramet…
-
Unscored —
An issue was discovered in Daniel Gultsch Conversations 2.3.4. It is possible to spoof a custom message to an existing …
-
Unscored —
Telligent Community 6.x, 7.x, 8.x, 9.x before 9.2.10.11796, 10.1.x before 10.1.10.11792, and 10.2.x before 10.2.3.4725 …
-
Unscored —
A vulnerability in the web admin component of Mitel MiVoice Office 400, versions R5.0 HF3 (v8839a1) and earlier, could …
-
Unscored —
Directory traversal vulnerability in the Splunk Django App in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.1…
-
Unscored —
Splunkd in Splunk Enterprise 6.2.x before 6.2.14 6.3.x before 6.3.11, and 6.4.x before 6.4.8; and Splunk Light before 6…
-
Unscored —
Splunk Enterprise 6.2.x before 6.2.14, 6.3.x before 6.3.10, 6.4.x before 6.4.7, and 6.5.x before 6.5.3; and Splunk Ligh…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Splunk Web in Splunk Enterprise 6.0.x before 6.0.14, 6.1.x before 6.1.13, 6…
-
Unscored —
A lottery smart contract implementation for Greedy 599, an Ethereum gambling game, generates a random value that is pre…