Skip to content
OpenAdvisories

Archive

26 December 2018

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Unscored —
    CVE-2018-11741 Public exploit EPSS 18%

    NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure v…

  • Unscored —
    CVE-2018-11742 Public exploit EPSS 14%

    NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.

  • Unscored —
    CVE-2018-19616 Public exploit EPSS 30%

    An issue was discovered in Rockwell Automation Allen-Bradley PowerMonitor 1000. An unauthenticated user can add/edit/re…

  • Medium 6.1
    CVE-2018-19799 Public exploit

    Dolibarr ERP and CRM contain XSS Vulnerability

    Dolibarr ERP/CRM through 8.0.3 has /exports/export.php?datatoexport= XSS.

  • Unscored —
    CVE-2018-20485 Public exploit

    Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature.

  • Unscored —
    CVE-2018-20484 Public exploit

    Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation.