Archive
18 March 2019
Vulnerabilities first published on this day (UTC), newest first.
25 results · Feed
-
Unscored —
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in /s/adada/cfiles/upload in Humhub 1.3.10 Communit…
-
Unscored —
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in file/file/upload in Humhub 1.3.10 Community Edit…
-
Unscored —
SmartDefragDriver.sys (2.0) in IObit Smart Defrag 6 never frees an executable kernel pool that is allocated with user d…
-
Unscored —
An issue was discovered in Zoho ManageEngine ADSelfService Plus 5.x through build 5704. It uses fixed ciphering keys to…
-
High 7.5
Moodle SSRF Vulnerability
Moodle 3.5.x before 3.5.4 allows SSRF.
-
Unscored —
An issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. A DOM-based XSS exists in the store part of the product.
-
Unscored —
An issue was discovered in WSO2 API Manager 2.1.0 and 2.6.0. Reflected XSS exists in the carbon part of the product.
-
Unscored —
An issue was discovered in SecurEnvoy SecurAccess 9.3.502. When put in Debug mode and used for RDP connections, the app…
-
Unscored —
The REST API in Wowza Streaming Engine 4.7.4.01 allows traversal of the directory structure and retrieval of a file via…
-
Unscored —
A stored cross-site scripting (XSS) vulnerability in the submit_ticket.php module in the WP Support Plus Responsive Tic…
-
Unscored —
In the Ban List plugin 1.0 for MyBB, any forum user with mod privileges can ban users and input an XSS payload into the…
-
Unscored —
The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a…
-
Unscored —
An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. The tools/ping Ping feature of the Diag…
-
Unscored —
An issue was discovered on Wifi-soft UniBox controller 3.x devices. The tools/controller/diagnostic_tools_controller Di…
-
Unscored —
An issue was discovered on Wifi-soft UniBox controller 0.x through 2.x devices. network/mesh/edit-nds.php is vulnerable…
-
Unscored —
An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drive…
-
Unscored —
An out-of-bounds read issue was discovered in the HTTP/2 protocol decoder in HAProxy 1.8.x and 1.9.x through 1.9.0 whic…
-
Unscored —
SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary…
-
Unscored —
The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_t…
-
Unscored —
Roxy Fileman 1.4.5 allows unrestricted file upload in upload.php.
-
Unscored —
Roxy Fileman 1.4.5 allows Directory Traversal in copydir.php, copyfile.php, and fileslist.php.
-
Unscored —
In the Linux kernel through 5.0.2, the function inotify_update_existing_watch() in fs/notify/inotify/inotify_user.c neg…
-
Unscored —
NetIQ eDirectory versions prior to 9.0.2, under some circumstances, could be susceptible to downgrade of communication …
-
Unscored —
When accessing the heron-ui webpage, people can modify the file paths outside of the current container to access any fi…
-
High 7.4
Improper Privilege Management in org.apache.hadoop:hadoop-main
In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default groups mapping mechanisms.