11 November 2018

9 results · Feed

• Unscored —
  CVE-2018-19181

  statics/ueditor/php/vendor/Local.class.php in YUNUCMS 1.1.5 allows arbitrary file deletion via the statics/ueditor/php/…

  Nov 11, 2018
• Unscored —
  CVE-2018-19180

  statics/app/index/controller/Install.php in YUNUCMS 1.1.5 (if install.lock is not present) allows remote attackers to e…

  Nov 11, 2018
• Unscored —
  CVE-2018-19178

  In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED eleme…

  Nov 11, 2018
• Unscored —
  CVE-2018-19143

  Open Ticket Request System (OTRS) 4.0.x before 4.0.33, 5.0.x before 5.0.31, and 6.0.x before 6.0.13 allows an authentic…

  otrs2 otrs2 Debian Ubuntu
  Nov 11, 2018
• Unscored —
  CVE-2018-19142

  Open Ticket Request System (OTRS) 6.0.x before 6.0.13 allows an admin to conduct an XSS attack via a modified URL.

  otrs2 otrs2 Debian Ubuntu
  Nov 11, 2018
• Unscored —
  CVE-2018-19141

  Open Ticket Request System (OTRS) 4.0.x before 4.0.33 and 5.0.x before 5.0.31 allows an admin to conduct an XSS attack …

  otrs2 otrs2 Debian Ubuntu
  Nov 11, 2018
• Unscored —
  CVE-2018-19170

  In JPress v1.0-rc.5, there is stored XSS via each of the first three input fields to the starter-tomcat-1.0/admin/setti…

  Nov 11, 2018
• Unscored —
  CVE-2018-19135 Public exploit

  ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an…

  Nov 11, 2018
• Unscored —
  CVE-2018-19168

  Shell Metacharacter Injection in www/modules/save.php in FruityWifi (aka PatatasFritas/PatataWifi) through 2.4 allows r…

  Nov 11, 2018