Archive

7 November 2018

Vulnerabilities first published on this day (UTC), newest first.

← October 2018 2018 / November /7 December 2018 →

All Critical High Medium Low Exploited only Public exploit

50 results · Feed

Unscored —

CVE-2018-19053

PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL gen…

Nov 7, 2018
Unscored —

CVE-2018-19052 Public exploit EPSS 14%

An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ …

lighttpd lighttpd Debian Ubuntu

Nov 7, 2018
Unscored —

CVE-2018-19047

mPDF through 7.1.6, if deployed as a web application that accepts arbitrary HTML, allows SSRF, as demonstrated by a '<i…

Nov 7, 2018
Unscored —

CVE-2018-19051

MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword abt_type parameter.

Nov 7, 2018
Unscored —

CVE-2018-19050

MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword langset parameter.

Nov 7, 2018
High 7.5

CVE-2018-12415

TIBCO Enterprise Message Service Vulnerable to CSRF Attacks

The Central Administration server (emsca) component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability which may al…

TIBCO Software TIBCO Enterprise Message Service - Community Edition TIBCO Enterprise Message Service TIBCO Enterprise Message Service - Developer Edition

Nov 7, 2018
High 7.5

CVE-2018-12412

TIBCO FTL Realm Server Vulnerable to CSRF Attacks

The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSR…

TIBCO Software TIBCO FTL Enterprise Edition TIBCO FTL Community Edition TIBCO FTL Developer Edition

Nov 7, 2018
High 7.5

CVE-2018-12414

TIBCO Rendezvous Vulnerable to CSRF Attacks

The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), and Rendezvous Daemon Manager (rvdm) components of TIBCO Software Inc.'s TIBCO Rendezvous, TIBCO Rendezvous Developer …

TIBCO Software TIBCO Rendezvous Developer Edition TIBCO Rendezvous TIBCO Rendezvous for z/OS Linux

Nov 7, 2018
High 7.5

CVE-2018-12411

TIBCO ActiveSpaces Administrative Daemon Vulnerable to CSRF Attacks

The administrative daemon (tibdgadmind) of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and TIBCO ActiveSpaces - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-…

TIBCO Software TIBCO ActiveSpaces - Enterprise Edition TIBCO ActiveSpaces - Developer Edition TIBCO ActiveSpaces - Community Edition

Nov 7, 2018
High 7.5

CVE-2018-12413

TIBCO Messaging - Apache Kafka Distribution - Schema Repository Vulnerable to CSRF Attacks

The Schema repository server (tibschemad) component of TIBCO Software Inc.'s TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Community Edition, and TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Enterprise Edition contains…

TIBCO Software TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Enterprise Edition TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Community Edition

Nov 7, 2018