17 December 2018

78 results · Feed

• Unscored —
  CVE-2018-19649

  XSS exists in InfoVista VistaPortal SE Version 5.1 (build 51029). VPortal/mgtconsole/RolePermissions.jsp has reflected …

  Dec 17, 2018
• Unscored —
  CVE-2018-19815

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/UserPo…

  Dec 17, 2018
• Unscored —
  CVE-2018-19813

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Subscr…

  Dec 17, 2018
• Unscored —
  CVE-2018-19771

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPool.jsp" has r…

  Dec 17, 2018
• Unscored —
  CVE-2018-19765

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.js…

  Dec 17, 2018
• Unscored —
  CVE-2018-19774

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has refl…

  Dec 17, 2018
• Unscored —
  CVE-2018-19775

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Variables.jsp" has reflect…

  Dec 17, 2018
• Unscored —
  CVE-2018-19770

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Users.jsp" has reflected X…

  Dec 17, 2018
• Unscored —
  CVE-2018-19822

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Shared…

  Dec 17, 2018
• Unscored —
  CVE-2018-19820

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Roles.…

  Dec 17, 2018
• Unscored —
  CVE-2018-19812

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SubFol…

  Dec 17, 2018
• Unscored —
  CVE-2018-19773

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentUser.jsp" has r…

  Dec 17, 2018
• Unscored —
  CVE-2018-19816

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/catego…

  Dec 17, 2018
• Unscored —
  CVE-2018-19809

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupC…

  Dec 17, 2018
• Unscored —
  CVE-2018-19768

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "SubPagePackages.jsp" has r…

  Dec 17, 2018
• Unscored —
  CVE-2018-19767

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has refl…

  Dec 17, 2018
• Unscored —
  CVE-2018-19766

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "GroupRessourceAdmin.jsp" h…

  Dec 17, 2018
• Unscored —
  CVE-2018-19821

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Securi…

  Dec 17, 2018
• Unscored —
  CVE-2018-19819

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Rights…

  Dec 17, 2018
• Unscored —
  CVE-2018-19818

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Contac…

  Dec 17, 2018
• Unscored —
  CVE-2018-19810

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupM…

  Dec 17, 2018
• Unscored —
  CVE-2018-19769

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "UserProperties.jsp" has re…

  Dec 17, 2018
• Unscored —
  CVE-2018-19814

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Subscr…

  Dec 17, 2018
• Unscored —
  CVE-2018-19811

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Import…

  Dec 17, 2018
• Unscored —
  CVE-2018-19772

  Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.js…

  Dec 17, 2018
• High 7.8
  CVE-2018-19295

  Sylabs Singularity Improper Input Validation

  Sylabs Singularity 2.4 to 2.6 allows local users to conduct Improper Input Validation attacks.

  singularity-container github.com/sylabs/singularity Ubuntu Go
  Dec 17, 2018
• Unscored —
  CVE-2018-20172

  An issue was discovered in Nagios XI before 5.5.8. The rss_url parameter of rss_dashlet/magpierss/scripts/magpie_slashb…

  Dec 17, 2018
• Unscored —
  CVE-2018-20171

  An issue was discovered in Nagios XI before 5.5.8. The url parameter of rss_dashlet/magpierss/scripts/magpie_simple.php…

  Dec 17, 2018
• Unscored —
  CVE-2018-20027

  The yaml_parse.load method in Pylearn2 allows code injection.

  Dec 17, 2018
• Unscored —
  CVE-2018-20173 EPSS 24%

  Zoho ManageEngine OpManager 12.3 before 123238 allows SQL injection via the getGraphData API.

  Dec 17, 2018
• Unscored —
  CVE-2018-20170

  OpenStack Keystone through 14.0.1 has a user enumeration vulnerability because invalid usernames have much faster respo…

  keystone keystone Ubuntu PyPI
  Dec 17, 2018
• Unscored —
  CVE-2018-20169

  An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Dec 17, 2018
• High 7.5
  CVE-2017-18353

  rendertron can remotely shut down Chrome instance

  Rendertron 1.0.0 includes an _ah/stop route to shutdown the Chrome instance responsible for serving render requests to all users. Visiting this route with a GET request allows any unauthorized remote attacker to disable the core service of the application.

  rendertron npm
  Dec 17, 2018
• High 7.5
  CVE-2017-18355

  Rendertron discloses absolute paths of files

  Installed packages are exposed by node_modules in Rendertron 1.0.0, allowing remote attackers to read absolute paths on the server by examining the "_where" attribute of package.json files.

  rendertron npm
  Dec 17, 2018
• High 7.5
  CVE-2017-18354

  rendertron LFI vulnerability

  Rendertron 1.0.0 allows for alternative protocols such as 'file://' introducing a Local File Inclusion (LFI) bug where arbitrary files can be read by a remote attacker.

  rendertron npm
  Dec 17, 2018
• Medium 6.1
  CVE-2017-18352

  rendertron XSS vulnerability

  Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs.

  rendertron npm
  Dec 17, 2018
• Unscored —
  CVE-2018-20167

  Terminology before 1.3.1 allows Remote Code Execution because popmedia is mishandled, as demonstrated by an unsafe "cat…

  terminology terminology Debian Ubuntu
  Dec 17, 2018
• Unscored —
  CVE-2018-20168

  Google gVisor before 2018-08-22 reuses a pagetable in a different level with the paging-structure cache intact, which a…

  Dec 17, 2018