Archive
November 2018
Vulnerabilities first published in this month (UTC), newest first.
93 results · Clear filters · Feed
-
Unscored —CVE-2018-18760 Public exploit
RhinOS 3.0 build 1190 allows CSRF.
-
Unscored —CVE-2018-18797 Public exploit
School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.
-
Unscored —CVE-2018-18801 Public exploit
The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=[SQL] or index.php?q=single-item&id…
-
Unscored —CVE-2018-18763 Public exploit
SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.
-
Unscored —CVE-2018-18805 Public exploit
Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.
-
Unscored —CVE-2018-18755 Public exploit
K-iwi Framework 1775 has SQL Injection via the admin/user/group/update user_group_id parameter or the admin/user/user/u…
-
Unscored —CVE-2018-18795 Public exploit
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.
-
Unscored —CVE-2018-18793 Public exploit
School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.
-
Unscored —CVE-2018-18794 Public exploit
School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.
-
Unscored —CVE-2018-5407 Public exploit
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attack…
-
Unscored —CVE-2018-16621 Public exploit
Sonatype Nexus Repository Manager before 3.14 allows Java Expression Language Injection.
-
Unscored —
XSS in the Ninja Forms plugin before 3.3.18 for WordPress allows Remote Attackers to execute JavaScript via the include…
-
Unscored —
Nagios XI 5.5.6 allows local authenticated attackers to escalate privileges to root via Autodiscover_new.php.
-
Unscored —
Snoopy 1.0 in Nagios XI 5.5.6 allows remote unauthenticated attackers to execute arbitrary commands via a crafted HTTP …
-
Unscored —CVE-2018-9539 Public exploit
In the ClearKey CAS descrambler, there is a possible use after free due to a race condition. This could lead to local e…
-
Medium 6.5
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper ac…
-
Medium 6.5
ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper ch…
-
High 8.8
Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbi…
KEV Jun 8, 2022 -
High 8.8
Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google C…
KEV Jun 8, 2022 -
Unscored —CVE-2018-6066 Public exploit
Lack of CORS checking by ResourceFetcher/ResourceLoader in Blink in Google Chrome prior to 65.0.3325.146 allowed a remo…
-
Unscored —CVE-2018-6064 Public exploit
Type Confusion in the implementation of __defineGetter__ in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote…
-
High 8.8CVE-2018-19277 Public exploit
XXE in PHPSpreadsheet due to encoding issue
securityScan() in PHPOffice PhpSpreadsheet through 1.5.0 allows a bypass of protection mechanisms for XXE via UTF-7 encoding in a .xlsx file
-
High 7.4
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation o…
KEV Mar 3, 2022 -
Unscored —
An information disclosure vulnerability exists when VBScript improperly discloses the contents of its memory, which cou…
-
Unscored —CVE-2018-8550 Public exploit
An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerabil…
-
Unscored —CVE-2018-8584 Public exploit
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (…
-
Unscored —
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Window…
-
High 7.5
LFI in PHP-Proxy 5.1.0
PHP-Proxy 5.1.0 allows remote attackers to read local files if the default "pre-installed version" (intended for users who lack shell access to their web server) is used. This occurs because the aeb067ca0aa9a3193dce3a7264c90187 app_key value from the default …
-
Unscored —
The Van Ons WP GDPR Compliance (aka wp-gdpr-compliance) plugin before 1.4.3 for WordPress allows remote attackers to ex…
-
Unscored —CVE-2018-19135 Public exploit
ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an…
-
Unscored —CVE-2018-19138 Public exploit
WSTMart 2.0.7 has CSRF via the index.php/admin/staffs/add.html URI.
-
Unscored —
DomainMOD through 4.11.01 has XSS via the assets/edit/registrar-account.php raid parameter.
-
Unscored —
A code injection vulnerability in /type.php in PHPCMS 2008 allows attackers to write arbitrary content to a website cac…
-
Unscored —CVE-2018-19131 Public exploit
Squid before 4.4 has XSS via a crafted X.509 certificate during HTTP(S) error page generation for certificate errors.
-
Unscored —
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file …
-
Unscored —
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory.
-
Critical 9.8
Cisco Small Business Switches Privileged Access Vulnerability
A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected softwa…
-
Medium 5.5CVE-2018-15437 Public exploit
Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service Vulnerability
A vulnerability in the system scanning component of Cisco Immunet and Cisco Advanced Malware Protection (AMP) for Endpoints running on Microsoft Windows could allow a local attacker to disable the scanning functionality of the product. This could allow execut…
-
Medium 5.3
nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessiv…
-
Critical 9.8
Deserialization of Untrusted Data in superset
Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Superset release under the Apache Software Foundation.