Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
4,117 results · page 61 of 83
Sep 21, 2018Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.CVE-2018-16833 · Email & office · Zohocorp · reported by MITREMedium 6.1
Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.
- Product
- Manageengine Desktop Central
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.compacketstormsecurity.com
Sep 21, 2018The DEISER "Profields - Project Custom Fields" app before 6.0.2 for Jira has Incorrect Access Control.CVE-2018-16281 · Other software · Deiser · reported by MITRECritical 9.8
The DEISER "Profields - Project Custom Fields" app before 6.0.2 for Jira has Incorrect Access Control.
- Product
- Profields-project Custom Fields
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmarketplace.atlassian.commarketplace.atlassian.com
Sep 21, 2018An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings HubCVE-2018-3915 · Computers, phones & browsers · Samsung · reported by talos-cna@cisco.comHigh 8.2
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 64 bytes. An attacker can send an arbitrarily long "bucket" value in order to exploit this vulnerability.
- Product
- SmartThings Hub STH-ETH-250
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Sep 21, 2018An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings HubCVE-2018-3914 · Computers, phones & browsers · Samsung · reported by talos-cna@cisco.comHigh 7.8
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 2000 bytes. An attacker can send an arbitrarily long "sessionToken" value in order to exploit this vulnerability.
- Product
- SmartThings Hub STH-ETH-250
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Sep 21, 2018An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings HubCVE-2018-3913 · Computers, phones & browsers · Samsung · reported by talos-cna@cisco.comMedium 6.7
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 32 bytes. An attacker can send an arbitrarily long "accessKey" value in order to exploit this vulnerability.
- Product
- Sth-eth-250 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Sep 21, 2018An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTTP server of Samsung SmartThings Hub.CVE-2018-3906 · Computers, phones & browsers · Samsung · reported by talos-cna@cisco.comHigh 8.2
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of a database field in video-core's HTTP server of Samsung SmartThings Hub. The video-core process insecurely extracts the shard.videoHostURL field from its SQLite database, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability.
- Product
- SmartThings Hub STH-ETH-250
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Sep 21, 2018Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message.CVE-2018-17302 · Other software · Espocrm · reported by MITREMedium 5.4
Stored XSS exists in views/fields/wysiwyg.js in EspoCRM 5.3.6 via a /#Email/view saved draft message.
- Product
- Espocrm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 21, 2018Reflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /#Account in the search panel.CVE-2018-17301 · Other software · Espocrm · reported by MITREMedium 5.4
Reflected XSS exists in client/res/templates/global-search/name-field.tpl in EspoCRM 5.3.6 via /#Account in the search panel.
- Product
- Espocrm
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 20, 2018LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.CVE-2018-16752 · Other software · Linknet-usa · reported by MITREHigh 8.8
LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases.
- Product
- Lw-n605r Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com
Sep 19, 2018Kibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source field formatter that could allow an attacker to obtain sensitive inCVE-2018-3830 · Other software · Elastic · reported by security@elastic.coMedium 6.1
Kibana versions 5.3.0 to 6.4.1 had a cross-site scripting (XSS) vulnerability via the source field formatter that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users.
- Product
- Kibana
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.comdiscuss.elastic.co
Sep 17, 2018The Jibu Pro plugin through 1.7 for WordPress is prone to Stored XSS via the wp-content/plugins/jibu-pro/quiz_action.php name (aka Quiz Name) field.CVE-2018-17138 · WordPress plugins & themes · reported by MITREMedium 5.4
The Jibu Pro plugin through 1.7 for WordPress is prone to Stored XSS via the wp-content/plugins/jibu-pro/quiz_action.php name (aka Quiz Name) field.
- Product
- Jibu Pro
- Affected
- up to 1.7
- What to do
- Affects up to 1.7. Update Jibu Pro to the newest version and check its changelog mentions this fix; if there isn’t one yet, deactivate it until there is.
Full record and what to do →NVD recordexploit-db.comexploit-db.com
Sep 17, 2018admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the cfg_author field in conjunction with a crafted cfg_webpath field.CVE-2018-17134 · Websites & servers · Phpmywind · reported by MITREHigh 7.2
admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the cfg_author field in conjunction with a crafted cfg_webpath field.
- Product
- Phpmywind
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 17, 2018admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the varvalue field.CVE-2018-17131 · Websites & servers · Phpmywind · reported by MITREHigh 7.2
admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the varvalue field.
- Product
- Phpmywind
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 17, 2018MetInfo 6.1.0 has SQL injection in doexport() in app/system/feedback/admin/feedback_admin.class.php via the class1 field.CVE-2018-17129 · Other software · Metinfo · reported by MITREMedium 4.9
MetInfo 6.1.0 has SQL injection in doexport() in app/system/feedback/admin/feedback_admin.class.php via the class1 field.
- Product
- Metinfo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 14, 2018Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields in the Partial BranCVE-2018-10763 · Other software · Synametrics · reported by MITREMedium 4.8
Multiple cross-site scripting (XSS) vulnerabilities in Synametrics SynaMan 4.0 build 1488 via the (1) Main heading or (2) Sub heading fields in the Partial Branding configuration page.
- Product
- Synaman
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comexploit-db.com
Sep 13, 2018Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstrated by a ta-server-password field in theCVE-2018-16987 · Other software · Squashtest · reported by MITREHigh 7.2
Squash TM through 1.18.0 presents the cleartext passwords of external services in the administration panel, as demonstrated by a ta-server-password field in the HTML source code.
- Product
- Squash TM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordci.squashtest.orgopenwall.com
Sep 12, 2018dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters.CVE-2018-16980 · Other software · Dotcms · reported by MITREMedium 6.1
dotCMS V5.0.1 has XSS in the /html/portlet/ext/contentlet/image_tools/index.jsp fieldName and inode parameters.
- Product
- Dotcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 12, 2018feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new.CVE-2018-16728 · Other software · Feindura · reported by MITREMedium 5.4
feindura 2.0.7 allows XSS via the tags field of a new page created at index.php?category=0&page=new.
- Product
- Feindura
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 12, 2018D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page.CVE-2018-16605 · Other software · Dlink · reported by MITREMedium 5.4
D-Link DIR-600M devices allow XSS via the Hostname and Username fields in the Dynamic DNS Configuration page.
- Product
- Dir-600m Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordyoutube.comyoutube.com
Sep 10, 2018In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to CVE-2018-16805 · Other software · B3log · reported by MITREMedium 4.8
In b3log Solo 2.9.3, XSS in the Input page under the Publish Articles menu, with an ID of linkAddress stored in the link JSON field, allows remote attackers to inject arbitrary Web scripts or HTML via a crafted site name provided by an administrator.
- Product
- Solo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2018It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields.CVE-2016-7075 · Other software · Red Hat · reported by Red HatHigh 7.5
It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields. An attacker could use this flaw to bypass authentication requirements by using a specially crafted X.509 certificate.
- Product
- OpenShift
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordaccess.redhat.combugzilla.redhat.com
Sep 10, 2018wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page.CVE-2018-16776 · Other software · Creatiwity · reported by MITREMedium 4.8
wityCMS 0.6.2 has XSS via the "Site Name" field found in the "Contact" "Configuration" page.
- Product
- Witycms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 10, 2018EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field.CVE-2018-16773 · Other software · Easycms · reported by MITREMedium 4.8
EasyCMS 1.5 allows XSS via the index.php?s=/admin/fields/update/navTabId/listfields/callbackType/closeCurrent content field.
- Product
- Easycms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 7, 2018Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter.CVE-2018-16059 · Other software · Endress · reported by MITREMedium 5.3
Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter.
- Product
- Wirelesshart Fieldgate Swg70 Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comcert.vde.com
Sep 6, 2018KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Scripting (XSS) vulnerability in Multiple fields oCVE-2018-1000670 · Other software · Koha · reported by MITREMedium 6.1
KOHA Library System version 16.11.x (up until 16.11.13) and 17.05.x (up until 17.05.05) contains a Cross Site Scripting (XSS) vulnerability in Multiple fields on multiple pages including /cgi-bin/koha/acqui/supplier.pl?op=enter , /cgi-bin/koha/circ/circulation.pl?borrowernumber=[number] , /cgi-bin/koha/serials/subscription-add.pl that can result in Privilege escalation by taking control of higher privileged users browser sessions. This attack appear to be exploitable via Victims must be socially engineered to visit a vulnerable webpage containing malicious payload. This vulnerability appears to have been fixed in 17.11.
- Product
- Koha
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugs.koha-community.orgbugs.koha-community.org
Sep 2, 2018Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen.CVE-2018-16379 · Other software · Digimute · reported by MITREMedium 4.8
Ogma CMS 0.4 Beta has XSS via the "Footer Text footer" field on the "Theme/Theme Options" screen.
- Product
- Ogma CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 2, 2018ChemCMS 1.0.6 has XSS via the "setting -> website information" field.CVE-2018-16346 · Other software · Chemcms Project · reported by MITREMedium 4.8
ChemCMS 1.0.6 has XSS via the "setting -> website information" field.
- Product
- Chemcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 1, 2018There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field.CVE-2018-16325 · Other software · Get-simple · reported by MITREMedium 6.1
There is XSS in GetSimple CMS 3.4.0.9 via the admin/edit.php title field.
- Product
- Getsimple CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 1, 2018In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field.CVE-2018-16324 · Other software · Icewarp · reported by MITREMedium 6.1
In IceWarp Server 12.0.3.1 and before, there is XSS in the /webmail/ username field.
- Product
- Mail Server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcxsecurity.compacketstormsecurity.com
Aug 28, 2018An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings HubCVE-2018-3916 · Computers, phones & browsers · Samsung · reported by talos-cna@cisco.comHigh 7.8
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 136 bytes. An attacker can send an arbitrarily long 'directory' value in order to exploit this vulnerability. An attacker can send an HTTP request to trigger this vulnerability.
- Product
- Samsung
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Aug 25, 2018GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field.CVE-2018-15843 · Other software · Get-simple · reported by MITREMedium 4.8
GetSimple CMS 3.3.14 has XSS via the admin/edit.php "Add New Page" field.
- Product
- Getsimple CMS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 24, 2018Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, PrCVE-2018-14059 · Other software · Pimcore · reported by MITREMedium 5.4
Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, Predefined Properties, Predefined Asset Metadata, Quantity Value, and Static Routes functions.
- Product
- Pimcore
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comseclists.org
Aug 23, 2018On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of itCVE-2018-3912 · Computers, phones & browsers · Samsung · reported by talos-cna@cisco.comHigh 7.8
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of its SQLite database, leading to a buffer overflow on the stack. The strcpy call overflows the destination buffer, which has a size of 128 bytes. An attacker can send an arbitrarily long "secretKey" value in order to exploit this vulnerability.
- Product
- SmartThings Hub STH-ETH-250
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Aug 23, 2018An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP server of Samsung SmartThings Hub STH-ECVE-2018-3919 · Computers, phones & browsers · Samsung · reported by talos-cna@cisco.comCritical 9.9
An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in video-core's HTTP server of Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17. The video-core process insecurely extracts the fields from the "clips" table of its SQLite database, leading to a buffer overflow on the stack. An attacker can send a series of HTTP requests to trigger this vulnerability.
- Product
- SmartThings Hub STH-ETH-250
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Aug 23, 2018On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of itCVE-2018-3917 · Computers, phones & browsers · Samsung · reported by talos-cna@cisco.comCritical 9.9
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process insecurely extracts the fields from the "shard" table of its SQLite database, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. The strcpy call overflows the destination buffer, which has a size of 16 bytes. An attacker can send an arbitrarily long "region" value in order to exploit this vulnerability.
- Product
- SmartThings Hub STH-ETH-250
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Aug 23, 2018On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payCVE-2018-3903 · Other software · Talos · reported by talos-cna@cisco.comCritical 9.9
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. The memcpy call overflows the destination buffer, which has a size of 512 bytes. An attacker can send an arbitrarily long "url" value in order to overwrite the saved-PC with 0x42424242.
- Product
- Samsung
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Aug 23, 2018On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payCVE-2018-3863 · Computers, phones & browsers · Samsung · reported by talos-cna@cisco.comCritical 9.9
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. A strcpy overflows the destination buffer, which has a size of 40 bytes. An attacker can send an arbitrarily long "user" value in order to exploit this vulnerability.
- Product
- SmartThings Hub STH-ETH-250
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordtalosintelligence.comtalosintelligence.com
Aug 22, 2018It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields.CVE-2017-7513 · Other software · Red Hat · reported by Red HatMedium 5.4
It was found that Satellite 5 configured with SSL/TLS for the PostgreSQL backend failed to correctly validate X.509 server certificate host name fields. A man-in-the-middle attacker could use this flaw to spoof a PostgreSQL server using a specially crafted X.509 certificate.
- Product
- Red Hat Satellite
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordbugzilla.redhat.comaccess.redhat.com
Aug 19, 2018CMSUno before 1.5.3 has XSS via the title field.CVE-2018-15567 · Other software · Cmsuno Project · reported by MITREMedium 6.1
CMSUno before 1.5.3 has XSS via the title field.
- Product
- Cmsuno
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 19, 2018fileshare.cmd on Telus Actiontec T2200H T2200H-31.128L.03 devices allows OS Command Injection via shell metacharacters in the smbdUserid or smbdPasswd field.CVE-2018-15553 · Other software · Telus · reported by MITREHigh 8.8
fileshare.cmd on Telus Actiontec T2200H T2200H-31.128L.03 devices allows OS Command Injection via shell metacharacters in the smbdUserid or smbdPasswd field.
- Product
- Actiontec T2200h Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordseclists.orgseclists.org
Aug 14, 2018inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject.CVE-2018-14888 · Other software · Thank You/like Project · reported by MITREMedium 6.1
inc/plugins/thankyoulike.php in the Eldenroot Thank You/Like plugin before 3.1.0 for MyBB allows XSS via a post or thread subject.
- Product
- Thank You/like
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comcommunity.mybb.com
Aug 13, 2018A missing sanitization of search results for an autocomplete field in NextCloud Talk <3.2.5 could lead to a stored XSS requiring user-interaction.CVE-2018-3781 · Other software · NextCloud · reported by support@hackerone.comMedium 5.4
A missing sanitization of search results for an autocomplete field in NextCloud Talk <3.2.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.
- Product
- nextcloud/talk
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhackerone.comnextcloud.com
Aug 13, 2018A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction.CVE-2018-3780 · Other software · NextCloud · reported by support@hackerone.comMedium 5.4
A missing sanitization of search results for an autocomplete field in NextCloud Server <13.0.5 could lead to a stored XSS requiring user-interaction. The missing sanitization only affected user names, hence malicious search results could only be crafted by authenticated users.
- Product
- nextcloud/server
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordhackerone.comnextcloud.com
Aug 10, 2018PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field.CVE-2018-15190 · Other software · Hotel Booking Script Project · reported by MITREMedium 5.4
PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field.
- Product
- Hotel Booking Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 10, 2018PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.CVE-2018-15189 · Other software · Advanced Real Estate Script Project · reported by MITREMedium 5.4
PHP Scripts Mall advanced-real-estate-script has XSS via the Name field of a profile.
- Product
- Advanced Real Estate Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 9, 2018PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795.CVE-2018-15184 · Other software · Naukri Clone Script Project · reported by MITREMedium 5.4
PHP Scripts Mall Naukri / Shine / Jobsite Clone Script 3.0.4 has Stored XSS via the USERNAME field, a related issue to CVE-2018-6795.
- Product
- Naukri Clone Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 9, 2018PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields.CVE-2018-15183 · Other software · Myperfectresume / Jobhero / Resume Clone Script Project · reported by MITREMedium 6.1
PHP Scripts Mall Myperfectresume / JobHero / Resume Clone Script 2.0.6 has Stored XSS via the Full Name and Title fields.
- Product
- Myperfectresume / Jobhero / Resume Clone Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 9, 2018PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.CVE-2018-15182 · Other software · CAR Rental Script Project · reported by MITREMedium 5.4
PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the FirstName and LastName fields.
- Product
- CAR Rental Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 6, 2018PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field in a profile.CVE-2018-14869 · Websites & servers · PHP Template Store Script Project · reported by MITREMedium 5.4
PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field in a profile.
- Product
- PHP Template Store Script
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgooglequeens.comexploit-db.com
Aug 4, 2018The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.CVE-2018-14937 · Other software · Mylittleforum · reported by MITREMedium 4.8
The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field.
- Product
- MY Little Forum
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordowendarlene.comowendarlene.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.