Archive
3 December 2018
Vulnerabilities first published on this day (UTC), newest first.
54 results · Feed
-
High 7.2CVE-2018-4019 EPSS 49%
An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the paramet…
-
High 7.2CVE-2018-4020 EPSS 49%
An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the paramet…
-
High 7.2CVE-2018-4021 EPSS 70%
An exploitable command injection vulnerability exists in the way Netgate pfSense CE 2.4.4-RELEASE processes the paramet…
-
High 7.8
A Vulnerability in the configdownload command of Brocade Fabric OS command line interface (CLI) versions before 8.2.1, …
-
Unscored —
A vulnerability in the proxy service of Brocade Fabric OS versions before 8.2.1, 8.1.2f, 8.0.2f, 7.4.2d could allow rem…
-
High 7.1
An exploitable information disclosure vulnerability exists in the password protection functionality of Quicken Deluxe 2…
-
Unscored —CVE-2018-14706 EPSS 17%
System command injection in the /DroboPix/api/drobopix/demo endpoint on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows …
-
Unscored —
Cross-site scripting in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attacke…
-
Unscored —
Incorrect access control in the /mysql/api/droboapp/data endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows una…
-
Unscored —CVE-2018-14707 EPSS 28%
Directory traversal in the Drobo Pix web application on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthenticated …
-
Unscored —
Incorrect access control in the Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to bypass aut…
-
Unscored —
Incorrect access control in the /drobopix/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unau…
-
Unscored —
An insecure transport protocol used by Drobo Dashboard API on Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers …
-
Unscored —
Incorrect access control in the /mysql/api/logfile.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unaut…
-
Unscored —CVE-2018-14701 EPSS 20%
System command injection in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows una…
-
Unscored —
Incorrect access control in the /mysql/api/diags.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthe…
-
Unscored —
Cross-site scripting in the MySQL API error page in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attackers to execute…
-
Unscored —
Incorrect access control in the /mysql/api/drobo.php endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows unauthe…
-
Unscored —
System command injection in the /DroboAccess/enable_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows una…
-
Unscored —
Cross-site scripting in the /DroboAccess/delete_user endpoint in Drobo 5N2 NAS version 4.0.5-13.28.96115 allows attacke…
-
Unscored —
In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that…
-
Unscored —
In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop (containing a Sass::Inspect::operato…
-
Unscored —
In Metinfo 6.1.3, include/interface/applogin.php allows setting arbitrary HTTP headers (including the Cookie header), a…
-
Unscored —
Metinfo 6.1.3 has reflected XSS via the admin/column/move.php lang_columnerr4 parameter.
-
High 7.3
It was found that RHSA-2018:2918 did not fully fix CVE-2018-16509. An attacker could possibly exploit another variant o…
-
Unscored —
In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malic…
-
Unscored —CVE-2018-1002009 Public exploit
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability r…
-
Unscored —CVE-2018-1002002 Public exploit
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability r…
-
Unscored —CVE-2018-1002008 Public exploit
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability r…
-
Unscored —CVE-2018-1002004 Public exploit
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability r…
-
Unscored —CVE-2018-1002007 Public exploit
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability r…
-
Unscored —CVE-2018-1002001 Public exploit
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability r…
-
Unscored —CVE-2018-1002000 Public exploit
There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require a…
-
Unscored —CVE-2018-1002003 Public exploit
There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability r…
-
Unscored —CVE-2018-1002006 Public exploit
These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in integration-contac…
-
Unscored —CVE-2018-1002005 Public exploit
These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in bft_list.html.php:…
-
Unscored —CVE-2018-7116 EPSS 10%
HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote denial of service vi…
-
Unscored —
The HPE-provided Windows firmware installer for certain Gen9, Gen8, G7,and G6 HPE servers allows local disclosure of pr…
-
Unscored —CVE-2018-7114 EPSS 33%
HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to remote buffer overflow in dbm…
-
Unscored —CVE-2018-7115 EPSS 13%
HPE Intelligent Management Center (IMC) prior to IMC PLAT 7.3 (E0605P06) is vulnerable to a remote buffer overflow in d…