Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
4,104 results · page 61 of 83
Sep 17, 2018MetInfo 6.1.0 has SQL injection in doexport() in app/system/feedback/admin/feedback_admin.class.php via the class1 field.CVE-2018-17129 · Other software · Metinfo · reported by MITREMedium 4.9
MetInfo 6.1.0 has SQL injection in doexport() in app/system/feedback/admin/feedback_admin.class.php via the class1 field.
- Product
- Metinfo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2018Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields in the Partial BranCVE-2018-10763 · Other software · Synametrics · reported by MITREMedium 4.8
Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields in the Partial Branding configuration page.
- Product
- Synaman
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com
Sep 13, 2018Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstrated by a ta-server-password field in theCVE-2018-16987 · Other software · Squashtest · reported by MITREHigh 7.2
Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstrated by a ta-server-password field in the HTML source code.
- Product
- Squash TM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordci.squashtest.orgopenwall.com
Sep 12, 2018dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters.CVE-2018-16980 · Other software · Dotcms · reported by MITREMedium 6.1
dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters.
- Product
- Dotcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 12, 2018feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new.CVE-2018-16728 · Other software · Feindura · reported by MITREMedium 5.4
feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new.
- Product
- Feindura
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 12, 2018D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page.CVE-2018-16605 · Other software · Dlink · reported by MITREMedium 5.4
D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page.
- Product
- Dir-600m Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordyoutube.comyoutube.com
Sep 10, 2018In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to CVE-2018-16805 · Other software · B3log · reported by MITREMedium 4.8
In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name provided by an administrator.
- Product
- Solo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2018It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields.CVE-2016-7075 · Other software · Red Hat · reported by Red HatHigh 7.5
It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields. An attacker could use this flaw to bypass authentication requirements by using a specially crafted X.509 certificate.
- Product
- OpenShift
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.combugzilla.redhat.com
Sep 10, 2018wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page.CVE-2018-16776 · Other software · Creatiwity · reported by MITREMedium 4.8
wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page.
- Product
- Witycms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2018EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field.CVE-2018-16773 · Other software · Easycms · reported by MITREMedium 4.8
EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field.
- Product
- Easycms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 7, 2018Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter.CVE-2018-16059 · Other software · Endress · reported by MITREMedium 5.3
Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter.
- Product
- Wirelesshart Fieldgate Swg70 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comcert.vde.com
Sep 6, 2018KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Scripting (XSS) vulnerability in Multiple fields oCVE-2018-1000670 · Other software · Koha · reported by MITREMedium 6.1
KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Scripting (XSS) vulnerability in Multiple fields on multiple pages including /cgi-bin/koha/acqui/supplier.pl?op=enter , /cgi-bin/koha/circ/circulation.pl?borrowernumber=[number] , /cgi-bin/koha/serials/subscription-add.pl that can result in Privilege escalation by taking control of higher privileged users browser sessions. This attack appear to be exploitable via Victims must be socially engineered to visit a vulnerable webpage containing malicious payload. This vulnerability appears to have been fixed in 17.11.
- Product
- Koha
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugs.koha-community.orgbugs.koha-community.org
Sep 2, 2018Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen.CVE-2018-16379 · Other software · Digimute · reported by MITREMedium 4.8
Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen.
- Product
- Ogma CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 2, 2018ChemCMS 1.0.6 has XSS via the "setting -> website information" field.CVE-2018-16346 · Other software · Chemcms Project · reported by MITREMedium 4.8
ChemCMS 1.0.6 has XSS via the "setting -> website information" field.
- Product
- Chemcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 1, 2018There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field.CVE-2018-16325 · Other software · Get-simple · reported by MITREMedium 6.1
There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field.
- Product
- Getsimple CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 1, 2018In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field.CVE-2018-16324 · Other software · Icewarp · reported by MITREMedium 6.1
In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field.
- Product
- Mail Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcxsecurity.compacketstormsecurity.com
Aug 28, 2018An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings HubCVE-2018-3916 · Computers, phones & browsers · Samsung · reported by talos-cna@cisco.comHigh 7.8
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 136 bytes. An attacker can send an arbitrarily long 'directory' value in order to exploit this vulnerability. An attacker can send an HTTP request to trigger this vulnerability.
- Product
- Samsung
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Aug 25, 2018GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field.CVE-2018-15843 · Other software · Get-simple · reported by MITREMedium 4.8
GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field.
- Product
- Getsimple CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 24, 2018Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, PrCVE-2018-14059 · Other software · Pimcore · reported by MITREMedium 5.4
Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, Predefined Properties, Predefined Asset Metadata, Quantity Value, and Static Routes functions.
- Product
- Pimcore
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Aug 23, 2018On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of itCVE-2018-3912 · Computers, phones & browsers · Samsung · reported by talos-cna@cisco.comHigh 7.8
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of its SQLite database, leading to a buffer overflow on the stack. The strcpy call overflows the destination buffer, which has a size of 128 bytes. An attacker can send an arbitrarily long "secretKey" value in order to exploit this vulnerability.
- Product
- SmartThings Hub STH-ETH-250
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Aug 23, 2018An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP server of Samsung SmartThings Hub STH-ECVE-2018-3919 · Computers, phones & browsers · Samsung · reported by talos-cna@cisco.comCritical 9.9
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process insecurely extracts the fields from the "clips" table of its SQLite database, leading to a buffer overflow on the stack. An attacker can send a series of HTTP requests to trigger this vulnerability.
- Product
- SmartThings Hub STH-ETH-250
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Aug 23, 2018On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of itCVE-2018-3917 · Computers, phones & browsers · Samsung · reported by talos-cna@cisco.comCritical 9.9
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of its SQLite database, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. The strcpy call overflows the destination buffer, which has a size of 16 bytes. An attacker can send an arbitrarily long "region" value in order to exploit this vulnerability.
- Product
- SmartThings Hub STH-ETH-250
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Aug 23, 2018On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payCVE-2018-3903 · Other software · Talos · reported by talos-cna@cisco.comCritical 9.9
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. The memcpy call overflows the destination buffer, which has a size of 512 bytes. An attacker can send an arbitrarily long "url" value in order to overwrite the saved-PC with 0x42424242.
- Product
- Samsung
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Aug 23, 2018On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payCVE-2018-3863 · Computers, phones & browsers · Samsung · reported by talos-cna@cisco.comCritical 9.9
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. A strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long "user" value in order to exploit this vulnerability.
- Product
- SmartThings Hub STH-ETH-250
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Aug 22, 2018It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields.CVE-2017-7513 · Other software · Red Hat · reported by Red HatMedium 5.4
It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate.
- Product
- Red Hat Satellite
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.redhat.comaccess.redhat.com
Aug 19, 2018CMSUno before 1.5.3 has XSS via the title field.CVE-2018-15567 · Other software · Cmsuno Project · reported by MITREMedium 6.1
CMSUno before 1.5.3 has XSS via the title field.
- Product
- Cmsuno
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 19, 2018fileshare.cmd on Telus Actiontec T2200H T2200H-31.128L.03 devices allows OS Command Injection via shell metacharacters in the smbdUserid or smbdPasswd field.CVE-2018-15553 · Other software · Telus · reported by MITREHigh 8.8
fileshare.cmd on Telus Actiontec T2200H T2200H-31.128L.03 devices allows OS Command Injection via shell metacharacters in the smbdUserid or smbdPasswd field.
- Product
- Actiontec T2200h Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orgseclists.org
Aug 14, 2018inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject.CVE-2018-14888 · Other software · Thank You/like Project · reported by MITREMedium 6.1
inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject.
- Product
- Thank You/like
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comcommunity.mybb.com
Aug 13, 2018A missing sanitization of search results for an autocomplete field in NextCloud Talk <3.2.5 could lead to a stored XSS requiring user-interaction.CVE-2018-3781 · Other software · NextCloud · reported by support@hackerone.comMedium 5.4
A missing sanitization of search results for an autocomplete field in NextCloud Talk <3.2.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.
- Product
- nextcloud/talk
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhackerone.comnextcloud.com
Aug 13, 2018A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction.CVE-2018-3780 · Other software · NextCloud · reported by support@hackerone.comMedium 5.4
A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.
- Product
- nextcloud/server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhackerone.comnextcloud.com
Aug 10, 2018PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field.CVE-2018-15190 · Other software · Hotel Booking Script Project · reported by MITREMedium 5.4
PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field.
- Product
- Hotel Booking Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 10, 2018PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.CVE-2018-15189 · Other software · Advanced Real Estate Script Project · reported by MITREMedium 5.4
PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.
- Product
- Advanced Real Estate Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 9, 2018PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795.CVE-2018-15184 · Other software · Naukri Clone Script Project · reported by MITREMedium 5.4
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795.
- Product
- Naukri Clone Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 9, 2018PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields.CVE-2018-15183 · Other software · Myperfectresume / Jobhero / Resume Clone Script Project · reported by MITREMedium 6.1
PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields.
- Product
- Myperfectresume / Jobhero / Resume Clone Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 9, 2018PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.CVE-2018-15182 · Other software · CAR Rental Script Project · reported by MITREMedium 5.4
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.
- Product
- CAR Rental Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 6, 2018PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field in a profile.CVE-2018-14869 · Websites & servers · PHP Template Store Script Project · reported by MITREMedium 5.4
PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field in a profile.
- Product
- PHP Template Store Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgooglequeens.comexploit-db.com
Aug 4, 2018The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.CVE-2018-14937 · Other software · Mylittleforum · reported by MITREMedium 4.8
The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.
- Product
- MY Little Forum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordowendarlene.comowendarlene.com
Aug 4, 2018The Add page option in my little forum 2.4.12 allows XSS via the Title field.CVE-2018-14936 · Other software · Mylittleforum · reported by MITREMedium 4.8
The Add page option in my little forum 2.4.12 allows XSS via the Title field.
- Product
- MY Little Forum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordowendarlene.comowendarlene.com
Aug 3, 2018PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields.CVE-2018-14541 · Other software · Readymadeb2bscript · reported by MITREMedium 5.4
PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields.
- Product
- Basic B2b
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgkaim.comexploit-db.com
Aug 3, 2018Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" (aka user fullname) field.CVE-2018-14924 · Other software · Matera · reported by MITREMedium 6.1
Matera Banco 1.0.0 is vulnerable to multiple stored XSS, as demonstrated by the sca/privilegio/consultarUsuario.jsf "Nome Completo" (aka user fullname) field.
- Product
- Banco
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmedium.comexchange.xforce.ibmcloud.com
Jul 30, 2018In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field.CVE-2017-7482 · Other software · [UNKNOWN] · reported by Red HatHigh 7.8
In the Linux kernel before version 4.12, Kerberos 5 tickets decoded when using the RXRPC keys incorrectly assumes the size of a field. This could lead to the size-remaining variable wrapping and the data pointer going over the end of the buffer. This could possibly lead to memory corruption and possible privilege escalation.
- Product
- kernel:
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orgsecurityfocus.com
Jul 27, 2018A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HTML and JavaScript inCVE-2017-15125 · Other software · Red Hat · reported by Red HatMedium 6.5
A flaw was found in CloudForms before 5.9.0.22 in the self-service UI snapshot feature where the name field is not properly sanitized for HTML and JavaScript input. An attacker could use this flaw to execute a stored XSS attack on an application administrator using CloudForms. Please note that CSP (Content Security Policy) prevents exploitation of this XSS however not all browsers support CSP.
- Product
- cloudforms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comaccess.redhat.com
Jul 23, 2018There exists one NULL pointer dereference vulnerability in AP4_JsonInspector::AddField in Ap4Atom.cpp in Bento4 1.5.1-624, which can allow attackers to cause a CVE-2018-14543 · Other software · Axiosys · reported by MITREMedium 5.5
There exists one NULL pointer dereference vulnerability in AP4_JsonInspector::AddField in Ap4Atom.cpp in Bento4 1.5.1-624, which can allow attackers to cause a denial-of-service via a crafted mp4 file. This vulnerability can be triggered by the executable mp4dump.
- Product
- Bento4
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 23, 2018SeaCMS 6.61 has two XSS issues in the admin_config.php file via certain form fields.CVE-2018-14517 · Other software · Seacms · reported by MITREMedium 6.1
SeaCMS 6.61 has two XSS issues in the admin_config.php file via certain form fields.
- Product
- Seacms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 12, 2018ClipperCMS 1.3.3 has stored XSS via the Full Name field of (1) Security -> Manager Users or (2) Security -> Web Users.CVE-2018-13998 · Other software · Clippercms · reported by MITREMedium 4.8
ClipperCMS 1.3.3 has stored XSS via the Full Name field of (1) Security -> Manager Users or (2) Security -> Web Users.
- Product
- Clippercms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2018The mintToken function of a smart contract implementation for DataShieldCoin, an Ethereum token, has an integer overflow that allows the owner of the contract tCVE-2018-13574 · Other software · Datashieldcoin Project · reported by MITREHigh 7.5
The mintToken function of a smart contract implementation for DataShieldCoin, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
- Product
- Datashieldcoin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2018The mintToken function of a smart contract implementation for HashShield, an Ethereum token, has an integer overflow that allows the owner of the contract to seCVE-2018-13545 · Other software · Hashshield Project · reported by MITREHigh 7.5
The mintToken function of a smart contract implementation for HashShield, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any value.
- Product
- Hashshield
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 7, 2018TCExam before 14.1.2 has XSS via an ff_ or xl_ field.CVE-2018-13422 · Other software · Tecnick · reported by MITREMedium 6.1
TCExam before 14.1.2 has XSS via an ff_ or xl_ field.
- Product
- Tcexam
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2018In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger an assertiCVE-2018-13304 · Other software · Ffmpeg · reported by MITREMedium 6.5
In libavcodec in FFmpeg 4.0.1, improper maintenance of the consistency between the context profile field and studio_profile in libavcodec may trigger an assertion failure while converting a crafted AVI file to MPEG4, leading to a denial of service, related to error_resilience.c, h263dec.c, and mpeg4videodec.c.
- Product
- Ffmpeg
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2018Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page.CVE-2018-13252 · Other software · Entrustdatacard · reported by MITREMedium 6.1
Entrust Datacard Syntera CS 5.x has XSS via the name field of "Domain or Computer Name" in the login page.
- Product
- Syntera Customization Suite
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.