Archive
November 2018
Vulnerabilities first published in this month (UTC), newest first.
986 results · Feed
-
Unscored —
NUUO NVRMini2 version 3.9.1 is vulnerable to authenticated remote command injection. An attacker can send crafted reque…
-
Unscored —
Zoom clients on Windows (before version 4.1.34814.1119), Mac OS (before version 4.1.34801.1116), and Linux (2.4.129780.…
-
High 7.5
Improper Access Control in activejob
A Broken Access Control vulnerability in Active Job versions >= 4.2.0 allows an attacker to craft user input which can cause Active Job to deserialize it using GlobalId and give them access to information that they should not have. This vulnerability has been…
-
Medium 6.5
Exposure of Sensitive Information to an Unauthorized Actor in activestorage
A bypass vulnerability in Active Storage >= 5.2.0 for Google Cloud Storage and Disk services allow an attacker to modify the `content-disposition` and `content-type` parameters which can be used in with HTML files and have them executed inline. Additionally, …
-
Unscored —
Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability exists in the embed…
-
Unscored —
Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the serv…
-
Unscored —
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PL…
-
Unscored —
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability exists in the emb…
-
Unscored —
An Unverified Password Change vulnerability exists in the embedded web servers in all Modicon M340, Premium, Quantum PL…
-
Unscored —
An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability exists in the embedded w…
-
Unscored —
Data Center Operation allows for the upload of a zip file from its user interface to the server. A carefully crafted, m…
-
Unscored —CVE-2018-18860 Public exploit
A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over…
-
Unscored —
VT-Designer Version 2.1.7.31 is vulnerable by the program reading the contents of a file (which is already in memory) i…
-
Unscored —
VT-Designer Version 2.1.7.31 is vulnerable by the program populating objects with user supplied input via a file withou…
-
Unscored —CVE-2018-15835 Public exploit
Android 1.0 through 9.0 has Insecure Permissions. The Android bug ID is 77286983.
-
Unscored —
In modules/HELPBOT_MODULE in Budabot 0.6 through 4.0, lax syntax validation allows remote attackers to perform a comman…
-
High 7.5CVE-2018-3948 EPSS 23%
An exploitable denial-of-service vulnerability exists in the URI-parsing functionality of the TP-Link TL-R600VPN HTTP s…
-
Unscored —CVE-2018-15768 Public exploit
Insecure MySQL Configuration Vulnerability
Dell OpenManage Network Manager versions prior to 6.5.0 enabled read/write access to the file system for MySQL users due to insecure default configuration setting for the embedded MySQL database.
-
Unscored —
Improper Authorization Vulnerability
The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file.
-
Medium 6.5
IBM StoredIQ 7.6 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and una…
-
Medium 6.7
IBM StoredIQ 7.6.0 does not implement proper authorization of user roles due to which it was possible for a low privile…
-
High 8.4
IBM DB2 for Linux, UNIX and Windows 9.7, 10.1, 10.5., and 11.1 db2pdcfg is vulnerable to a stack based buffer overflow,…
-
Unscored —
Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Centra…
-
Unscored —
LXCI for VMware and LXCI for Microsoft System Center
LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate.
-
Unscored —
LXCI for VMware
In versions prior to 5.5, LXCI for VMware allows an authenticated user to write to any system file due to insufficient sanitization during the upload of a backup file.
-
Unscored —
LXCI for VMware
In versions prior to 5.5, LXCI for VMware allows an authenticated user to download any system file due to insufficient input sanitization during file downloads.
-
Medium 6.1
Improper Authentication in Keycloak
The SAML broker consumer endpoint in Keycloak before version 4.6.0.Final ignores expiration conditions on SAML assertions. An attacker can exploit this vulnerability to perform a replay attack.
-
Unscored —
In Artifex MuPDF 1.14.0, there is an infinite loop in the function svg_dev_end_tile in fitz/svg-device.c, as demonstrat…
-
Unscored —
There is a NULL pointer dereference at function sixel_helper_set_additional_message (status.c) in libsixel 1.8.2 that w…
-
Unscored —
There is a heap-based buffer over-read at wav.c in wav_write_header in libsndfile 1.0.28 that will cause a denial of se…
-
Unscored —
There is a heap-based buffer overflow at fromsixel.c (function: image_buffer_resize) in libsixel 1.8.2 that will cause …
-
Unscored —
There is a heap-based buffer over-read at writer.c (function: write_png_to_file) in libsixel 1.8.2 that will cause a de…
-
Unscored —
-
Unscored —
There is an illegal address access at fromsixel.c (function: sixel_decode_raw_impl) in libsixel 1.8.2 that will cause a…
-
Unscored —
There is a heap-based buffer over-read at stb_image_write.h (function: stbi_write_png_to_mem) in libsixel 1.8.2 that wi…
-
Unscored —
There is a heap-based buffer over-read at stb_image.h (function: stbi__tga_load) in libsixel 1.8.2 that will cause a de…
-
Unscored —
There is an illegal address access at asm/preproc.c (function: is_mmacro) in Netwide Assembler (NASM) 2.14rc16 that wil…
-
Unscored —
In The Sleuth Kit (TSK) through 4.6.4, hfs_cat_traverse in tsk/fs/hfs.c does not properly determine when a key length i…
-
Unscored —
i4 assistant 7.85 allows XSS via a crafted machine name field within iOS settings.
-
Unscored —CVE-2018-18619 Public exploit
internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability be…