Archive
November 2018
Vulnerabilities first published in this month (UTC), newest first.
986 results · Feed
-
Critical 9.8
Deserialization of Untrusted Data in superset
Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Superset release under the Apache Software Foundation.
-
Unscored —
PbootCMS 1.2.2 allows remote attackers to execute arbitrary PHP code by specifying a .php filename in a "SET GLOBAL gen…
-
Unscored —
An issue was discovered in mod_alias_physical_handler in mod_alias.c in lighttpd before 1.4.50. There is potential ../ …
-
Unscored —
mPDF through 7.1.6, if deployed as a web application that accepts arbitrary HTML, allows SSRF, as demonstrated by a '<i…
-
Unscored —
MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword abt_type parameter.
-
Unscored —
MetInfo 6.1.3 has XSS via the admin/index.php?a=dogetpassword langset parameter.
-
High 7.5
TIBCO Enterprise Message Service Vulnerable to CSRF Attacks
The Central Administration server (emsca) component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability which may al…
-
High 7.5
TIBCO FTL Realm Server Vulnerable to CSRF Attacks
The realm server (tibrealmserver) component of TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-site request forgery (CSR…
-
High 7.5
TIBCO Rendezvous Vulnerable to CSRF Attacks
The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), and Rendezvous Daemon Manager (rvdm) components of TIBCO Software Inc.'s TIBCO Rendezvous, TIBCO Rendezvous Developer …
-
High 7.5
TIBCO ActiveSpaces Administrative Daemon Vulnerable to CSRF Attacks
The administrative daemon (tibdgadmind) of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and TIBCO ActiveSpaces - Enterprise Edition contains a vulnerability which may allow an attacker to perform cross-…
-
High 7.5
TIBCO Messaging - Apache Kafka Distribution - Schema Repository Vulnerable to CSRF Attacks
The Schema repository server (tibschemad) component of TIBCO Software Inc.'s TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Community Edition, and TIBCO Messaging - Apache Kafka Distribution - Schema Repository - Enterprise Edition contains…
-
Critical 9.8
Richfaces vulnerable to arbitrary code execution
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4…
KEV Sep 28, 2023 -
High 7.2
Improper Restriction of XML External Entity Reference in org.apache.syncope:syncope-core
An administrator with workflow definition entitlements can use DTD to perform malicious operations, including but not limited to file read, file write, and code execution.
-
High 7.5
Path Traversal in knightjs
A Path Traversal in Knightjs versions <= 0.0.1 allows an attacker to read content of arbitrary files on a remote server.
-
Medium 5.3
Path Traversal in takeapeek
A path traversal in takeapeek module versions <=0.2.2 allows an attacker to list directory and files.
-
Medium 6.1
Stored Cross-Site Scripting in tianma-static
A stored xss in tianma-static module versions <=1.0.4 allows an attacker to execute arbitrary javascript.
-
Medium 5.4
Improper Control of Interaction Frequency in Apache syncope-core
A malicious user with enough administration entitlements can inject html-like elements containing JavaScript statements into Connector names, Report names, AnyTypeClass keys and Policy descriptions. When another user with enough administration entitlements ed…
-
Unscored —
In smp_br_state_machine_event of smp_br_main.cc, there is a possible out of bounds write due to memory corruption. This…
-
Unscored —
In gatts_process_attribute_req of gatt_sc.cc, there is a possible read of uninitialized data due to a missing bounds ch…
-
Unscored —
In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could l…
-
Unscored —
In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could l…
-
Unscored —CVE-2018-9445 Public exploit
In readMetadata of Utils.cpp, there is a possible path traversal bug due to a confused deputy. This could lead to local…
-
Unscored —
In avrc_proc_vendor_command of avrc_api.cc, there is a possible out of bounds write due to a missing bounds check. This…
-
Unscored —
In process_l2cap_cmd of l2c_main.cc, there is a possible out of bounds read due to a missing bounds check. This could l…
-
Unscored —
In avct_bcb_msg_ind of avct_bcb_act.cc, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Unscored —
In getstring of ID3.cpp there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote…
-
Unscored —CVE-2018-9488 Public exploit
In the SELinux permissions of crash_dump.te, there is a permissions bypass due to a missing restriction. This could lea…
-
Unscored —
In DynamicRefTable::load of ResourceTypes.cpp, there is a possible out of bounds read due to a missing bounds check. Th…
-
Unscored —
In bnep_data_ind of bnep_main.c, there is a possible remote code execution due to a double free. This could lead to rem…
-
Unscored —
In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of …
-
Unscored —
In driver_override_store of bus.c, there is a possible out of bounds write due to an incorrect bounds check. This could…
-
Unscored —
In avdt_msg_prs_cfg of avdt_msg.cc, there is a possible out of bounds read due to a missing bounds check. This could le…
-
Unscored —
When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including…
-
Unscored —
In hid_debug_events_read of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds ch…
-
Unscored —
In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with n…
-
Unscored —
In CopyToOMX of OMXNodeInstance.cpp there is a possible out-of-bounds write due to an incorrect bounds check. This coul…
-
Unscored —
In bta_dm_sdp_result of bta_dm_act.cc, there is a possible out of bounds stack write due to a missing bounds check. Thi…
-
Unscored —
In processMessagePart of InboundSmsHandler.java, there is a possible remote denial of service due to improper input val…
-
Unscored —
When a device connects only over WiFi VPN, the device may not receive security updates due to some incorrect checks. Th…
-
Unscored —
In computeFocusedWindow of RootWindowContainer.java, and related functions, there is possible interception of keypresse…