Skip to content
OpenAdvisories

Archive

29 November 2018

Vulnerabilities first published on this day (UTC), newest first.

7 results · Clear filters · Feed

  • Unscored —
    CVE-2018-18619 Public exploit

    internal/advanced_comment_system/admin.php in Advanced Comment System 1.0 is prone to an SQL injection vulnerability be…

  • Unscored —
    CVE-2018-19750 Public exploit

    DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Dom…

  • Unscored —
    CVE-2018-19751 Public exploit Scanner template

    DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields.

  • Unscored —
    CVE-2018-19752 Public exploit Scanner template

    DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar.

  • Unscored —
    CVE-2018-19749 Public exploit Scanner template

    DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field.

  • Unscored —
    CVE-2018-18649 Public exploit

    An issue was discovered in the wiki API in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8,…

  • Unscored —
    CVE-2018-19627 Public exploit EPSS 18%

    In Wireshark 2.6.0 to 2.6.4 and 2.4.0 to 2.4.10, the IxVeriWave file parser could crash. This was addressed in wiretap/…