Archive
November 2018
Vulnerabilities first published in this month (UTC), newest first.
90 results · Clear filters · Feed
-
Medium 4.8
XSS in baserCMS before 4.1.4
An issue was discovered in baserCMS before 4.1.4. In the Register New Category feature of the Upload menu, the category name can be used for XSS via the data[UploaderCategory][name] parameter to an admin/uploader/uploader_categories/edit URI.
-
Medium 5.7
An exploitable firmware downgrade vulnerability exists in the firmware update functionality of Yi Home Camera 27US 1.8.…
-
Medium 6.2
IBM Robotic Process Automation with Automation Anywhere 11 could under certain cases, display the password in a Control…
-
Medium 5.3
IBM Robotic Process Automation with Automation Anywhere 11 could disclose sensitive information in a web request that c…
-
Medium 5.5
IBM Robotic Process Automation with Automation Anywhere 10.0 and 11.0 allows a remote attacker to execute arbitrary cod…
-
Medium 4.1
IBM Spectrum Protect Server 7.1 and 8.1 could disclose highly sensitive information via trace logs to a local privilege…
-
Medium 6.2
IBM Robotic Process Automation with Automation Anywhere 11 could store highly sensitive information in the form of unen…
-
Medium 5.4
IBM Quality Manager (RQM) 5.0 through 5.0.2 and 6.0 through 6.0.6 are vulnerable to cross-site scripting. This vulnerab…
-
Medium 5.6
All versions up to V3.03.10.B23P2 of ZTE ZXR10 8905E product are impacted by TCP Initial Sequence Number (ISN) reuse vu…
-
Medium 6.5
A flaw was found in glusterfs server through versions 4.1.4 and 3.1.2 which allowed repeated usage of GF_META_LOCK_KEY …