Archive
22 May 2019
Vulnerabilities first published on this day (UTC), newest first.
16 results · Clear filters · Feed
-
Unscored —CVE-2018-7844 Public exploit
A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum…
-
Unscored —CVE-2018-7854 Public exploit
A CWE-248 Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, a…
-
High 7.5CVE-2018-7852 Public exploit
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …
-
Unscored —CVE-2018-7845 Public exploit
A CWE-125: Out-of-bounds Read vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …
-
Unscored —
A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Mo…
-
Unscored —CVE-2018-7848 Public exploit
A CWE-200: Information Exposure vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum…
-
Unscored —CVE-2018-7843 Public exploit
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, …
-
Unscored —CVE-2018-7849 Public exploit
A CWE-248: Uncaught Exception vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum a…
-
Unscored —
A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon…
-
Unscored —
A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 w…
-
Critical 9.8
A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which could cause unwanted cod…
KEV Apr 15, 2022 -
Unscored —
The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to e…
-
Unscored —
The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and f…
-
Unscored —
An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sanitation in the theme-edit.php file allow…
-
Unscored —CVE-2019-12279 Public exploit
Nagios XI 5.6.1 allows SQL injection via the username parameter to login.php?forgotpass (aka the reset password form). …
-
Unscored —CVE-2019-12102 Public exploit
Kentico 11 through 12 lets attackers upload and explore files without authentication via the cmsmodules/medialibrary/fo…