Archive

6 November 2018

Vulnerabilities first published on this day (UTC), newest first.

← October 2018 2018 / November /6 December 2018 →

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

Medium 5.3

CVE-2018-16473

Path Traversal in takeapeek

A path traversal in takeapeek module versions <=0.2.2 allows an attacker to list directory and files.

npm takeapeek takeapeek npm

Nov 6, 2018
Medium 6.1

CVE-2018-16474

Stored Cross-Site Scripting in tianma-static

A stored xss in tianma-static module versions <=1.0.4 allows an attacker to execute arbitrary javascript.

npm tianma-static tianma-static npm

Nov 6, 2018
Medium 5.4

CVE-2018-17184

Improper Control of Interaction Frequency in Apache syncope-core

A malicious user with enough administration entitlements can inject html-like elements containing JavaScript statements into Connector names, Report names, AnyTypeClass keys and Policy descriptions. When another user with enough administration entitlements ed…

Apache Software Foundation Apache Syncope org.apache.syncope:syncope-core Maven

Nov 6, 2018
Medium 4.3

CVE-2018-1606

IBM Jazz based applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IB…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Nov 6, 2018
Medium 5.9

CVE-2018-1694

IBM Jazz applications (IBM Rational Collaborative Lifecycle Management 5.0 through 5.02 and 6.0 through 6.0.6, IBM Rati…

IBM Rational Collaborative Lifecycle Management Rational Quality Manager Rational DOORS Next Generation

Nov 6, 2018