Archive
20 November 2018
Vulnerabilities first published on this day (UTC), newest first.
36 results · Feed
-
Unscored —
FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (out-of-bounds read, a…
-
Unscored —
ext/standard/var_unserializer.c in PHP 5.x through 7.1.24 allows attackers to cause a denial of service (application cr…
-
Unscored —
An issue was discovered in GreenCMS v2.3.0603. There is a CSRF vulnerability that allows attackers to delete a log file…
-
Unscored —
FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exc…
-
Unscored —
FoxitReader.exe in Foxit Reader 9.3.0.10826 allows remote attackers to cause a denial of service (Break instruction exc…
-
Unscored —
ext/standard/var.c in PHP 5.x through 7.1.24 on Windows allows attackers to cause a denial of service (NULL pointer der…
-
Unscored —
DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP tra…
-
Unscored —CVE-2018-18859 Public exploit
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS…
-
Unscored —CVE-2018-18772 Public exploit
CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=send_ssh, as de…
-
Unscored —CVE-2018-18774 Public exploit
CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows XSS via the admin/index.php module parameter.
-
Unscored —
An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x be…
-
Unscored —CVE-2018-18857 Public exploit
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS…
-
Unscored —CVE-2018-18865 Public exploit
The Royal browser extensions TS before 4.3.60728 (Release Date 2018-07-28) and TSX before 3.3.1 (Release Date 2018-09-1…
-
Unscored —CVE-2018-18773 Public exploit
CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.740 allows CSRF via admin/index.php?module=rootpwd, as dem…
-
Unscored —
Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.
-
Unscored —
An issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04 and CoaguChek / cobas h2…
-
Unscored —
An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x be…
-
Unscored —
Zoho ManageEngine OpManager 12.3 before 123219 has a Self XSS Vulnerability.
-
Unscored —CVE-2018-18858 Public exploit
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS…
-
Unscored —
An issue was discovered in Roche Accu-Chek Inform II Base Unit / Base Unit Hub before 03.01.04 and CoaguChek / cobas h2…
-
Unscored —CVE-2018-18856 Public exploit
Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS…
-
Unscored —
Zoho ManageEngine OpManager 12.3 before 123219 has stored XSS.
-
Unscored —
Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed.
-
Unscored —
DENX U-Boot through 2018.09-rc1 has a locally exploitable buffer overflow via a crafted kernel image because filesystem…
-
Unscored —
An issue was discovered in Roche Accu-Chek Inform II Instrument before 03.06.00 (Serial number below 14000) and 04.x be…
-
Unscored —
Cleartext Storage of credentials in the iSmartAlarmData.xml configuration file in the iSmartAlarm application through 2…
-
Unscored —
Incorrect access control for the diagnostic files of the iSmartAlarm Cube One through 2.2.4.10 allows an attacker to re…
-
Unscored —
Insecure Cryptographic Storage of credentials in com.vestiacom.qbeecamera_preferences.xml in the QBee Cam application t…
-
Unscored —
An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in "ATA high" mode, not vulnerable in "TCG" or "AT…
-
Unscored —CVE-2018-12038 Public exploit
An issue was discovered on Samsung 840 EVO devices. Vendor-specific commands may allow access to the disk-encryption ke…
-
Unscored —
An open redirect vulnerability exists in the Access Manager Identity Provider prior to 4.4 SP3.
-
High 7.5
IBM API Connect 2018.1 through 2018.3.7 could allow an unauthenticated attacker to cause a denial of service due to not…
-
Unscored —
Portainer through 1.19.2 provides an API endpoint (/api/users/admin/check) to verify that the admin user is already cre…
-
Unscored —
Google Monorail before 2018-05-04 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected …
-
Unscored —
Google Monorail before 2018-06-07 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected …
-
Unscored —
Google Monorail before 2018-04-04 has a Cross-Site Search (XS-Search) vulnerability because CSV downloads are affected …