Skip to content
OpenAdvisories

Archive

16 November 2018

Vulnerabilities first published on this day (UTC), newest first.

← October 2018 2018 / November /16 December 2018 →
  1. 129
  2. 228
  3. 33
  4. 46
  5. 522
  6. 647
  7. 750
  8. 838
  9. 932
  10. 108
  11. 119
  12. 1243
  13. 1338
  14. 14157
  15. 1542
  16. 1639
  17. 1720
  18. 185
  19. 1910
  20. 2036
  21. 2115
  22. 2212
  23. 2313
  24. 241
  25. 253
  26. 2661
  27. 2796
  28. 2842
  29. 2944
  30. 3037
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Unscored —
    CVE-2018-18955 Public exploit

    In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escala…

    linux-raspi2 linux-hwe linux-azure linux-gcp Debian Ubuntu
  • Unscored —
    CVE-2018-18803 Public exploit

    Curriculum Evaluation System 1.0 allows SQL Injection via the login screen, related to frmCourse.vb and includes/user.v…

  • Unscored —
    CVE-2018-18799 Public exploit

    School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.

  • Unscored —
    CVE-2018-18804 Public exploit

    Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb.

  • Unscored —
    CVE-2018-18761 Public exploit EPSS 16%

    SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.

  • Unscored —
    CVE-2018-18759 Public exploit

    Modbus Slave 7.0.0 in modbus tools has a Buffer Overflow.

  • Unscored —
    CVE-2018-18760 Public exploit

    RhinOS 3.0 build 1190 allows CSRF.

  • Unscored —
    CVE-2018-18797 Public exploit

    School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.

  • Unscored —
    CVE-2018-18801 Public exploit

    The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=[SQL] or index.php?q=single-item&id…

  • Unscored —
    CVE-2018-18763 Public exploit

    SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.

  • Unscored —
    CVE-2018-18805 Public exploit

    Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.

  • Unscored —
    CVE-2018-18755 Public exploit

    K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/u…

  • Unscored —
    CVE-2018-18795 Public exploit

    School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.

  • Unscored —
    CVE-2018-18793 Public exploit

    School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.

  • Unscored —
    CVE-2018-18794 Public exploit

    School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.