Skip to content
OpenAdvisories

Archive

10 January 2019

Vulnerabilities first published on this day (UTC), newest first.

← December 2018 2019 / January /10 February 2019 →
  1. 14
  2. 229
  3. 358
  4. 410
  5. 5 
  6. 6 
  7. 78
  8. 871
  9. 9196
  10. 1048
  11. 1158
  12. 124
  13. 139
  14. 1414
  15. 1560
  16. 16212
  17. 1712
  18. 18123
  19. 193
  20. 20 
  21. 214
  22. 2227
  23. 2330
  24. 24107
  25. 2513
  26. 263
  27. 272
  28. 2828
  29. 2934
  30. 3018
  31. 3129
All Critical High Medium Low Exploited only Public exploit

14 results · Clear filters · Feed

  • Medium 6.1
    CVE-2018-15461

    Cisco Webex Business Suite Cross-Site Scripting Vulnerability

    A vulnerability in the MyWebex component of Cisco Webex Business Suite could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker coul…

    Cisco Cisco WebEx Meeting Center Network devices
  • Medium 6.1
    CVE-2017-1002152

    Bodhi Cross-site Scripting Vulnerability

    Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles.

    Fedora Project Infrastructure Bodhi bodhi PyPI
  • Medium 6.1
    CVE-2018-15457

    Cisco Prime Infrastructure Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The …

    Cisco Cisco Prime Infrastructure Network devices
  • Medium 5.3
    CVE-2018-15458

    Cisco Firepower Management Center Disk Utilization Denial of Service Vulnerability

    A vulnerability in the Shell Access Filter feature of Cisco Firepower Management Center (FMC), when used in conjunction with remote authentication, could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of servic…

    Cisco Cisco Firepower Management Center Network devices
  • Medium 5.3
    CVE-2018-0484

    Cisco IOS and IOS XE Software Secure Shell Connection on VRF Vulnerability

    A vulnerability in the access control logic of the Secure Shell (SSH) server of Cisco IOS and IOS XE Software may allow connections sourced from a virtual routing and forwarding (VRF) instance despite the absence of the vrf-also keyword in the access-class co…

    Cisco Cisco IOS iOS Network devices
  • Medium 4.3
    CVE-2018-15456

    Cisco Identity Services Engine Password Recovery Vulnerability

    A vulnerability in the Admin Portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to view saved passwords in plain text. The vulnerability is due to the incorrect inclusion of saved passwords when loading configuration …

    Cisco Cisco Identity Services Engine Software Network devices
  • Medium 5.4
    CVE-2018-0482

    Cisco Prime Network Control System Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Prime Network Control System could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected system. The vul…

    Cisco Cisco Prime Network Control System Network devices
  • Medium 4.6
    CVE-2018-0483

    Cisco Jabber Client Framework Instant Message Cross-Site Scripting Vulnerability

    A vulnerability in Cisco Jabber Client Framework (JCF) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of an affected system. The vulnerability is due to insufficient validation of user-supplied inpu…

    Cisco Cisco Jabber IM for Android Android Network devices
  • Medium 4.3
    CVE-2018-0474

    Cisco Unified Communications Manager Digest Credentials Disclosure Vulnerability

    A vulnerability in the web-based management interface of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view digest credentials in clear text. The vulnerability is due to the incorrect inclusion of saved passwords in con…

    Cisco Cisco Unified Communications Manager Network devices
  • Medium 5.1
    CVE-2018-0449

    Cisco Jabber Client Framework Insecure Directory Permissions Vulnerability

    A vulnerability in the Cisco Jabber Client Framework (JCF) software, installed as part of the Cisco Jabber for Mac client, could allow an authenticated, local attacker to corrupt arbitrary files on an affected device that has elevated privileges. The vulnerab…

    Cisco Cisco Jabber for Mac Network devices
  • Medium 6.5
    CVE-2018-0461

    Cisco IP Phone 8800 Series Arbitrary Script Injection Vulnerability

    A vulnerability in the Cisco IP Phone 8800 Series Software could allow an unauthenticated, remote attacker to conduct an arbitrary script injection attack on an affected device. The vulnerability exists because the software running on an affected device insuf…

    Cisco Cisco IP Phone 8800 Series Software Network devices
  • Medium 5.9
    CVE-2019-5884

    Sensitive Data Exposure in elFinder

    php/elFinder.class.php in elFinder before 2.1.45 leaks information if PHP's curl extension is enabled and safe_mode or open_basedir is not set.

    studio-42/elfinder Packagist
  • Medium 6.8
    CVE-2018-0282

    Cisco IOS and IOS XE Software TCP Denial of Service Vulnerability

    A vulnerability in the TCP socket code of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a state condition between the socket state and the transmission control …

    Cisco Cisco IOS iOS Network devices
  • Medium 5.3
    CVE-2018-20685

    In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filena…

    openssh openssh openssh-ssh1 openssh Debian Ubuntu Alpine