1 November 2018

29 results · Feed

• Unscored —
  CVE-2018-18695

  M2SOFT Report Designer Viewer 5.0 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via a crafte…

  Nov 1, 2018
• Unscored —
  CVE-2018-18775 Public exploit Scanner template

  Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting …

  Nov 1, 2018
• Unscored —
  CVE-2018-18777 Public exploit Scanner template EPSS 23%

  Directory traversal vulnerability in Microstrategy Web, version 7, in "/WebMstr7/servlet/mstrWeb" (in the parameter sub…

  Nov 1, 2018
• Unscored —
  CVE-2018-18776 Public exploit

  Microstrategy Web, version 7, does not sufficiently encode user-controlled inputs, resulting in a Cross-Site Scripting …

  Nov 1, 2018
• Unscored —
  CVE-2018-18714 Public exploit

  RegFilter.sys in IOBit Malware Fighter 6.2 and earlier is susceptible to a stack-based buffer overflow when an attacker…

  Nov 1, 2018
• Unscored —
  CVE-2018-6907

  A Cross Site Request Forgery (CSRF) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touc…

  Nov 1, 2018
• Unscored —
  CVE-2018-6906

  A persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and …

  Nov 1, 2018
• Unscored —
  CVE-2018-6011

  The time-based one-time-password (TOTP) function in the application logic of the Green Electronics RainMachine Mini-8 (…

  Nov 1, 2018
• Unscored —
  CVE-2018-6908

  An authentication bypass vulnerability exists in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD…

  Nov 1, 2018
• Unscored —
  CVE-2018-6012

  The 'Weather Service' feature of the Green Electronics RainMachine Mini-8 (2nd generation) allows an attacker to inject…

  Nov 1, 2018
• Unscored —
  CVE-2018-6909

  A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web appli…

  Nov 1, 2018
• Unscored —
  CVE-2018-10586

  NetGain Enterprise Manager (EM) is affected by multiple Stored Cross-Site Scripting (XSS) vulnerabilities in versions b…

  Nov 1, 2018
• Unscored —
  CVE-2018-10587

  NetGain Enterprise Manager (EM) is affected by OS Command Injection vulnerabilities in versions before 10.0.57. These v…

  Nov 1, 2018
• High 7.5
  CVE-2018-3928

  An exploitable code execution vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.7.0D…

  Yi Technology Yi Technology
  Nov 1, 2018
• High 8.8
  CVE-2018-3910

  An exploitable code execution vulnerability exists in the cloud OTA setup functionality of Yi Home Camera 27US 1.8.7.0D…

  Yi Technology Yi Technology
  Nov 1, 2018
• Critical 9.1
  CVE-2018-3900

  An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0…

  Yi Technology Yi Technology
  Nov 1, 2018
• High 8.8
  CVE-2018-3977

  An exploitable code execution vulnerability exists in the XCF image rendering functionality of SDL2_image-2.0.3. A spec…

  Simple DirectMedia Layer Simple DirectMedia Layer sdl-image1.2 libsdl2-image Debian Ubuntu
  Nov 1, 2018
• Critical 9.0
  CVE-2018-3947

  An exploitable information disclosure vulnerability exists in the phone-to-camera communications of Yi Home Camera 27US…

  Yi Technology Yi Technology
  Nov 1, 2018
• Medium 5.6
  CVE-2018-7356

  All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vu…

  ZTE ZXR10 8905E
  Nov 1, 2018
• Medium 6.5
  CVE-2018-14660

  A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY …

  [UNKNOWN] glusterfs glusterfs glusterfs Debian Ubuntu
  Nov 1, 2018
• High 8.6
  CVE-2018-15454

  Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software Denial of Service Vulnerability

  A vulnerability in the Session Initiation Protocol (SIP) inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to rel…

  Cisco Cisco Adaptive Security Appliance (ASA) Software Network devices
  Nov 1, 2018
• High 8.1
  CVE-2016-2123

  A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndr_pull_dnsp_name contains an integer wrap proble…

  [UNKNOWN] samba samba samba Debian Ubuntu Alpine
  Nov 1, 2018
• High 7.5
  CVE-2016-2120

  An issue has been found in PowerDNS Authoritative Server versions up to and including 3.4.10, 4.0.1 allowing an authori…

  [UNKNOWN] pdns pdns pdns Debian Ubuntu Alpine
  Nov 1, 2018
• Unscored —
  CVE-2018-18887

  S-CMS PHP 1.0 has SQL injection in member/member_news.php via the type parameter (aka the $N_type field).

  Nov 1, 2018
• Unscored —
  CVE-2018-18891

  MiniCMS 1.10 allows file deletion via /mc-admin/post.php?state=delete&delete= because the authentication check occurs t…

  Nov 1, 2018
• Unscored —
  CVE-2018-18890

  MiniCMS 1.10 allows full path disclosure via /mc-admin/post.php?state=delete&delete= with an invalid filename.

  Nov 1, 2018
• Unscored —
  CVE-2018-18888

  An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows up…

  Nov 1, 2018
• Unscored —
  CVE-2018-18892

  MiniCMS 1.10 allows execution of arbitrary PHP code via the install.php sitename parameter, which affects the site_name…

  Nov 1, 2018
• Unscored —
  CVE-2018-18883

  An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a…

  xen xen xen Debian Ubuntu Alpine
  Nov 1, 2018