Skip to content
OpenAdvisories

Archive

22 May 2019

Vulnerabilities first published on this day (UTC), newest first.

16 results · Clear filters · Feed

  • Unscored —
    CVE-2018-7844 Public exploit

    A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum…

  • Unscored —
    CVE-2018-7854 Public exploit

    A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, a…

  • High 7.5
    CVE-2018-7852 Public exploit

    A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

  • Unscored —
    CVE-2018-7845 Public exploit

    A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

  • Unscored —
    CVE-2018-7842 Public exploit EPSS 35%

    A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Mo…

  • Unscored —
    CVE-2018-7848 Public exploit

    A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum…

  • Unscored —
    CVE-2018-7843 Public exploit

    A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …

  • Unscored —
    CVE-2018-7849 Public exploit

    A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum a…

  • Unscored —
    CVE-2018-7846 Public exploit EPSS 30%

    A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon…

  • Unscored —
    CVE-2019-6814 Public exploit EPSS 37%

    A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 w…

  • Critical 9.8
    CVE-2018-7841 Exploited Public exploit Scanner template EPSS 72%

    A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted cod…

    KEV Apr 15, 2022
  • Unscored —
    CVE-2018-14729 Public exploit EPSS 10%

    The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to e…

  • Unscored —
    CVE-2019-3403 Public exploit Scanner template EPSS 54%

    The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and f…

  • Unscored —
    CVE-2019-11231 Public exploit EPSS 72%

    An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sanitation in the theme-edit.php file allow…

  • Unscored —
    CVE-2019-12279 Public exploit

    Nagios XI 5.6.1 allows SQL injection via the username parameter to login.php?forgotpass (aka the reset password form). …

  • Unscored —
    CVE-2019-12102 Public exploit

    Kentico 11 through 12 lets attackers upload and explore files without authentication via the cmsmodules/medialibrary/fo…