Archive
6 December 2018
Vulnerabilities first published on this day (UTC), newest first.
75 results · Feed
-
Unscored —
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Conn…
-
Unscored —
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP)…
-
Unscored —
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP)…
-
Unscored —
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Conn…
-
Unscored —
Amazon Web Services (AWS) FreeRTOS through 1.3.1 allows remote attackers to execute arbitrary code because of mbedTLS c…
-
Unscored —
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Conn…
-
Unscored —
Amazon Web Services (AWS) FreeRTOS through 1.3.1 has an uninitialized pointer free in SOCKETS_SetSockOpt.
-
Unscored —
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Conn…
-
Unscored —
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP)…
-
Unscored —
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP)…
-
Unscored —
Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Conn…
-
Unscored —
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP)…
-
Unscored —
An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP)…
-
High 7.8CVE-2018-6756 Public exploit
True Key (TK) Windows Client - Authentication Abuse vulnerability
Authentication Abuse vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute unauthorized commands via specially crafted malware.
-
High 7.5CVE-2018-6757 Public exploit
True Key (TK) Windows Client - Privilege Escalation vulnerability
Privilege Escalation vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.
-
High 7.2CVE-2018-6755 Public exploit
True Key (TK) Windows Client - Weak Directory Permission Vulnerability
Weak Directory Permission Vulnerability in Microsoft Windows client in McAfee True Key (TK) 5.1.230.7 and earlier allows local users to execute arbitrary code via specially crafted malware.
-
Unscored —
Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station Status or Account Settin…
-
Unscored —
Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATH_INFO.
-
Unscored —
An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. An email address can be modifie…
-
Unscored —
An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. There is member/member_email.ph…
-
Unscored —
An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. It has SQL injection via the me…
-
Unscored —
An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50…
-
Unscored —CVE-2018-19660 EPSS 29%
An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50…
-
Unscored —
The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption.
-
Unscored —
Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking page of the Actiontec …
-
Unscored —
Zoho ManageEngine OpManager 12.3 before 123237 has XSS in the domain controller.
-
Unscored —
Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php data[title] parameter, as demonstrated by a crafted onloa…
-
Unscored —
Norton Password Manager for Android (formerly Norton Identity Safe) may be susceptible to a cross site scripting (XSS) …
-
Unscored —
DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field.
-
Unscored —CVE-2018-19913 Public exploit
DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field.
-
Unscored —
DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field.
-
Unscored —CVE-2018-19911 Public exploit
FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allows remote attackers to execute arbitrary commands via the ap…
-
Unscored —
An issue was discovered in MISP 2.4.9x before 2.4.99. In app/Model/Event.php (the STIX 1 import code), an unescaped fil…
-
Medium 4.3
IBM Connections 5.0, 5.5, and 6.0 could allow an authenticated user to obtain sensitive information from invalid reques…
-
Medium 6.1
IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to hijack the clicking action of the victim. By …
-
Medium 4.0
IBM i2 Enterprise Insight Analysis 2.1.7 allows web pages to be stored locally which can be read by another user on the…
-
Medium 5.9
IBM i2 Enterprise Insight Analysis 2.1.7 could allow a remote attacker to obtain sensitive information, caused by the f…
-
Medium 5.4
IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.0.0, 3.0.2, and 3.0.5 is vulnerable to cros…
-
Unscored —
The svpn component of the F5 BIG-IP APM client prior to version 7.1.7.2 for Linux and macOS runs as a privileged proces…
-
Unscored —
In multiple functions of ContentProvider.java, there is a possible permission bypass due to a missing URI validation. T…