Skip to content
OpenAdvisories

Archive

November 2018

Vulnerabilities first published in this month (UTC), newest first.

5 results · Clear filters · Feed

  • Medium 6.5
    CVE-2018-16854 Public exploit

    Moodle Login CSRF vulnerability in login form

    A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form is not protected by a token to prevent login cross-site request forgery. Fixed versions include 3.6, 3.5.3, 3.4.6, 3.3.9 and 3.1.15.

  • Medium 6.5
    CVE-2018-7357 Public exploit EPSS 88%

    ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper ac…

  • Medium 6.5
    CVE-2018-7358 Public exploit EPSS 90%

    ZTE ZXHN H168N product with versions V2.2.0_PK1.2T5, V2.2.0_PK1.2T2, V2.2.0_PK11T7 and V2.2.0_PK11T have an improper ch…

  • Medium 5.5
    CVE-2018-15437 Public exploit

    Cisco Immunet and Cisco AMP for Endpoints System Scan Denial of Service Vulnerability

    A vulnerability in the system scanning component of Cisco Immunet and Cisco Advanced Malware Protection (AMP) for Endpoints running on Microsoft Windows could allow a local attacker to disable the scanning functionality of the product. This could allow execut…

  • Medium 5.3
    CVE-2018-16843 Public exploit EPSS 48%

    nginx before versions 1.15.6 and 1.14.1 has a vulnerability in the implementation of HTTP/2 that can allow for excessiv…