Skip to content
OpenAdvisories

Archive

27 November 2018

Vulnerabilities first published on this day (UTC), newest first.

← October 2018 2018 / November /27 December 2018 →
  1. 129
  2. 228
  3. 33
  4. 46
  5. 522
  6. 647
  7. 750
  8. 838
  9. 932
  10. 108
  11. 119
  12. 1243
  13. 1338
  14. 14157
  15. 1542
  16. 1639
  17. 1720
  18. 185
  19. 1910
  20. 2036
  21. 2115
  22. 2212
  23. 2313
  24. 241
  25. 253
  26. 2661
  27. 2796
  28. 2842
  29. 2944
  30. 3037
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.5
    CVE-2018-0719

    Security Advisory for Vulnerabilities in QTS

    Cross-site Scripting (XSS) vulnerability in NAS devices of QNAP Systems Inc. QTS allows attackers to inject javascript. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on build 201…

    QNAP Systems QTS
  • Medium 4.8
    CVE-2018-17256

    Umbraco CMS vulnerable to stored XSS

    Persistent cross-site scripting (XSS) vulnerability in Umbraco CMS 7.12.3 allows authenticated users to inject arbitrary web script via the Header Name of a content (Blog, Content Page, etc.). The vulnerability is exploited when updating or removing public ac…

    CyberSecurity Philippines - CERT UmbracoCMS umbraco NuGet
  • Medium 6.5
    CVE-2018-19609

    Showdoc Forced Browsing

    ShowDoc 2.4.1 allows remote attackers to obtain sensitive information by navigating with a modified page_id, as demonstrated by reading note content, or discovering a username in the JSON data at a diff URL.

    showdoc/showdoc Packagist