Archive
November 2018
Vulnerabilities first published in this month (UTC), newest first.
986 results · Feed
-
Unscored —
A floating point exception in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious …
-
Unscored —
A heap buffer over-read in parse_tiff_ifd in dcraw through 9.28 could be used by attackers able to supply malicious fil…
-
Unscored —
A floating point exception in kodak_radc_load_raw in dcraw through 9.28 could be used by attackers able to supply malic…
-
Unscored —
A buffer over-read in crop_masked_pixels in dcraw through 9.28 could be used by attackers able to supply malicious file…
-
Medium 5.3
A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final fi…
-
Medium 5.5
The Linux kernel before 4.15-rc8 was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capab…
-
Unscored —
Stored XSS was discovered in the Easy Testimonials plugin 3.2 for WordPress. Three wp-admin/post.php parameters (_ikcf_…
-
Medium 6.5CVE-2018-16854 Public exploit
Moodle Login CSRF vulnerability in login form
A flaw was found in moodle versions 3.5 to 3.5.2, 3.4 to 3.4.5, 3.3 to 3.3.8, 3.1 to 3.1.14 and earlier. The login form is not protected by a token to prevent login cross-site request forgery. Fixed versions include 3.6, 3.5.3, 3.4.6, 3.3.9 and 3.1.15.
-
High 7.1
IBM WebSphere Application Server 9.0.0.0 through 9.0.0.9 is vulnerable to a XML External Entity Injection (XXE) attack …
-
Medium 4.0
IBM Integration Bus 9.0.0.0, 9.0.0.11, 10.0.0.0, and 10.0.0.14 (including IBM WebSphere Message Broker 8.0.0.0 and 8.0.…
-
Unscored —
zb_system/admin/index.php?act=UploadMng in Z-BlogPHP 1.5 mishandles file preview, leading to content spoofing. NOTE: th…
-
Unscored —
tp4a TELEPORT 3.1.0 has CSRF via user/do-reset-password to change any password, such as the administrator password.
-
Unscored —
An issue was discovered in PHPok 4.9.015. admin.php?c=update&f=unzip allows remote attackers to execute arbitrary code …
-
Unscored —
Interspire Email Marketer through 6.1.6 has SQL Injection via an updateblock sortorder request to Dynamiccontenttags.php
-
Unscored —
JTBC(PHP) 3.0.1.7 has CSRF via the console/xml/manage.php?type=action&action=edit URI, as demonstrated by an XSS payloa…
-
Unscored —
Interspire Email Marketer through 6.1.6 has SQL Injection via a tagids Delete action to Dynamiccontenttags.php.
-
Unscored —
JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user.
-
Unscored —
BageCMS 3.1.3 has CSRF via upload/index.php?r=admini/admin/ownerUpdate to modify a user account.
-
Unscored —
An issue was discovered in Dotcms through 5.0.3. Attackers may perform XSS attacks via the inode, identifier, or fieldN…
-
Unscored —
index.php?r=site%2Flogin in EduSec through 4.2.6 does not restrict sending a series of LoginForm[username] and LoginFor…
-
Unscored —
JTBC(PHP) 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter.
-
Unscored —
Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid[] request to Dynamiccontenttags.php.
-
Unscored —
CuppaCMS before 2018-11-12 has SQL Injection in administrator/classes/ajax/functions.php via the reference_id parameter.
-
Unscored —
sikcms 1.1 has CSRF via admin.php?m=Admin&c=Users&a=userAdd to add an administrator account.
-
Unscored —
Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttag…
-
Unscored —
An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because…
-
Unscored —
An issue was discovered in arcms through 2018-03-19. No authentication is required for index/main, user/useradd, or img…
-
Unscored —
JEECMS 9.3 has CSRF via the api/admin/content/save URI to add news.
-
Unscored —CVE-2018-19550 Public exploit
Interspire Email Marketer through 6.1.6 allows arbitrary file upload via a surveys_submit.php "create survey and submit…
-
Unscored —
An issue was discovered in JasPer 2.0.14. There is a NULL pointer dereference in the function jp2_decode in libjasper/j…
-
Unscored —
An issue was discovered in JasPer 2.0.14. There is a heap-based buffer over-read of size 8 in the function jp2_decode i…
-
Unscored —CVE-2018-19537 Public exploit
TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_h…
-
Unscored —
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.1…
-
Unscored —
An issue was discovered in JasPer 2.0.14. There is an access violation in the function jas_image_readcmpt in libjasper/…
-
Unscored —
An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.1…
-
Unscored —
A NULL pointer dereference vulnerability exists in the function PdfTranslator::setTarget() in pdftranslator.cpp of PoDo…
-
Unscored —
TP-Link TL-WR886N 7.0 1.1.0 devices allow remote attackers to cause a denial of service (Tlb Load Exception) via crafte…
-
Unscored —
HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function u…
-
Unscored —
HTTL (aka Hyper-Text Template Language) through 1.0.11 allows remote command execution because the decodeXml function u…
-
Unscored —
In Exiv2 0.26 and previous versions, PngChunk::readRawProfile in pngchunk_int.cpp may cause a denial of service (applic…