By publication date

Exploited and new serious CVEs: April 2018

107 records · 3 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 2

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
60This week	CVE-2018-6849Weaponized	In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://duckduckgo · duckduckgo · CWE-200 Pre-auth Info leak	Medium4.3	—	28.7%	Apr 1, 2018
43Plan	CVE-2018-9230No exploit	In OpenResty through 1.13.6.1, URI parameters are obtained using the ngx.req.get_uri_args and ngx.req.get_post_args functions that ignore paopenresty · openresty · CWE-89 Pre-auth SQL injection	Critical9.8	—	13.2%	Apr 2, 2018
39Monitor	CVE-2018-4121Proof of concept	An issue was discovered in certain Apple products.apple · safari · CWE-119 pre-auth RCE Memory safety	High8.8	—	13.0%	Apr 3, 2018
60This week	CVE-2018-4162Weaponized	An issue was discovered in certain Apple products.apple · safari · CWE-119 pre-auth RCE Memory safety	High8.8	—	37.8%	Apr 3, 2018
33Monitor	CVE-2018-6914No exploit	Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2ruby-lang · ruby · CWE-22 Pre-auth Path traversal	High7.5	—	10.1%	Apr 3, 2018
31Monitor	CVE-2018-9234No exploit	GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in agnupg · gnupg · CWE-320 Pre-auth	High7.5	—	1.9%	Apr 3, 2018
34Monitor	CVE-2016-10718Proof of concept	Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service.brave · brave browser · CWE-20 Pre-auth Denial of service	High7.5	—	12.2%	Apr 3, 2018
47Plan	CVE-2018-9205Proof of concept	Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.drupal · avatar uploader · CWE-22 Pre-auth Path traversal	High7.5	—	55.0%	Apr 4, 2018
43Plan	CVE-2018-9248Proof of concept	FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin" header.fiberhome · vdsl2 modem hg 150-ub firmware · CWE-287 Pre-auth Auth bypass	Critical9.8	—	14.4%	Apr 4, 2018
54Plan	CVE-2018-0986Proof of concept	A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, lmicrosoft · exchange server · CWE-787 pre-auth RCE Memory safety	High8.8	—	63.2%	Apr 4, 2018
26Monitor	CVE-2018-8719Proof of concept	An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress.wpsecurityauditlog · wp security audit log · CWE-532 Pre-auth Info leak	Medium5.3	—	15.6%	Apr 4, 2018
54Plan	CVE-2018-9126Proof of concept	The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequently discover databazldnn · dnnarticle · CWE-200 Pre-auth Info leak	Critical9.8	—	48.9%	Apr 4, 2018
32Monitor	CVE-2016-8371Proof of concept	The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism is enabled.phoenixcontact · ilc plcs firmware · CWE-592 Pre-auth	High7.3	—	10.8%	Apr 5, 2018
32Monitor	CVE-2016-8380Proof of concept	The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.phoenixcontact · ilc plcs firmware · CWE-767 Pre-auth Auth bypass	High7.3	—	10.8%	Apr 5, 2018
50Plan	CVE-2017-14462No exploit	An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microlrockwellautomation · micrologix 1400 b firmware Pre-auth	Critical9.8	—	35.2%	Apr 5, 2018
51Plan	CVE-2017-14463No exploit	An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microlrockwellautomation · micrologix 1400 b firmware Pre-auth	Critical9.8	—	38.8%	Apr 5, 2018
50Plan	CVE-2017-14464No exploit	An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microlrockwellautomation · micrologix 1400 b firmware Pre-auth	Critical9.8	—	37.9%	Apr 5, 2018
50Plan	CVE-2017-14465No exploit	An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microlrockwellautomation · micrologix 1400 b firmware Pre-auth	Critical9.8	—	35.2%	Apr 5, 2018
50Plan	CVE-2017-14466No exploit	An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microlrockwellautomation · micrologix 1400 b firmware Pre-auth	Critical9.8	—	37.9%	Apr 5, 2018
50Plan	CVE-2017-14467No exploit	An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microlrockwellautomation · micrologix 1400 b firmware Pre-auth	Critical9.8	—	37.2%	Apr 5, 2018
50Plan	CVE-2017-14468No exploit	An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microlrockwellautomation · micrologix 1400 b firmware Pre-auth	Critical9.8	—	37.9%	Apr 5, 2018
50Plan	CVE-2017-14469No exploit	An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microlrockwellautomation · micrologix 1400 b firmware Pre-auth	Critical9.8	—	37.9%	Apr 5, 2018
50Plan	CVE-2017-14470No exploit	An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microlrockwellautomation · micrologix 1400 b firmware Pre-auth	Critical9.8	—	37.9%	Apr 5, 2018
50Plan	CVE-2017-14471No exploit	An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microlrockwellautomation · micrologix 1400 b firmware Pre-auth	Critical9.8	—	37.9%	Apr 5, 2018
50Plan	CVE-2017-14472No exploit	An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microlrockwellautomation · micrologix 1400 b firmware Pre-auth	Critical9.8	—	37.9%	Apr 5, 2018
50Plan	CVE-2017-14473No exploit	An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microlrockwellautomation · micrologix 1400 b firmware Pre-auth	Critical9.8	—	37.9%	Apr 5, 2018
33Monitor	CVE-2018-1271Proof of concept	Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configuvmware · spring framework · CWE-22 Pre-auth Path traversal	Medium5.9	—	34.4%	Apr 6, 2018
62This week	CVE-2018-1270Proof of concept	Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose vmware · spring framework · CWE-94 pre-auth RCE	Critical9.8	—	77.4%	Apr 6, 2018
36Monitor	CVE-2018-1308No exploit	This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig=<inlapache · solr · CWE-611 Pre-auth XXE	High7.5	—	20.8%	Apr 9, 2018
54Plan	CVE-2018-1217Proof of concept	Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1dell · emc avamar · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	50.8%	Apr 9, 2018
29Monitor	CVE-2014-1889Proof of concept	The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrarbuddypress · buddypress · CWE-264	Medium6.5	—	10.6%	Apr 10, 2018
64This week	CVE-2018-9995Proof of concept	TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Logintbkvision · tbk-dvr4216 firmware Pre-auth Auth bypass	Critical9.8	—	82.3%	Apr 10, 2018
98Now	CVE-2018-1273Weaponized	Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerabilitbroadcom · spring data commons · CWE-94 pre-auth RCE	Critical9.8	KEV	96.9%	Apr 11, 2018
56Plan	CVE-2018-1275No exploit	Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose vmware · spring framework · CWE-94 pre-auth RCE	Critical9.8	—	57.4%	Apr 11, 2018
43Plan	CVE-2017-14459Proof of concept	An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IEmoxa · awk-3131a firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	12.6%	Apr 11, 2018
45Plan	CVE-2018-10054Weaponized	H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary Jcognitect · datomic · CWE-20 RCE	High8.8	—	33.7%	Apr 11, 2018
35Monitor	CVE-2018-0870No exploit	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cormicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High7.5	—	15.4%	Apr 11, 2018
37Monitor	CVE-2018-0920No exploit	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "microsoft · excel RCE	High7.8	—	20.6%	Apr 11, 2018
34Monitor	CVE-2018-0956No exploit	A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.microsoft · windows 10 Pre-auth Denial of service	High7.5	—	13.6%	Apr 11, 2018
27Monitor	CVE-2018-0967No exploit	A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service Denialmicrosoft · windows 10 Denial of service	Medium5.3	—	18.4%	Apr 11, 2018
35Monitor	CVE-2018-0979No exploit	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	15.4%	Apr 11, 2018
50Plan	CVE-2018-0980Proof of concept	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	66.3%	Apr 11, 2018
35Monitor	CVE-2018-0988No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripmicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High7.5	—	15.4%	Apr 11, 2018
35Monitor	CVE-2018-0990No exploit	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	15.4%	Apr 11, 2018
35Monitor	CVE-2018-0991No exploit	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cormicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High7.5	—	15.4%	Apr 11, 2018
35Monitor	CVE-2018-0993No exploit	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	15.4%	Apr 11, 2018
35Monitor	CVE-2018-0994No exploit	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	15.4%	Apr 11, 2018
35Monitor	CVE-2018-0995No exploit	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	15.4%	Apr 11, 2018
34Monitor	CVE-2018-0996No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripmicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High7.5	—	14.9%	Apr 11, 2018
35Monitor	CVE-2018-0997No exploit	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cormicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High7.5	—	15.4%	Apr 11, 2018
34Monitor	CVE-2018-1001No exploit	A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripmicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High7.5	—	14.9%	Apr 11, 2018
38Monitor	CVE-2018-1003No exploit	A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, akmicrosoft · windows 10 · CWE-119 RCE Memory safety	High7.8	—	22.8%	Apr 11, 2018
41Plan	CVE-2018-1004No exploit	A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remmicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High8.8	—	18.7%	Apr 11, 2018
47Plan	CVE-2018-1010Proof of concept	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsomicrosoft · windows 10 · CWE-20 pre-auth RCE	High8.8	—	39.7%	Apr 11, 2018
37Monitor	CVE-2018-1011No exploit	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "microsoft · excel RCE	High7.8	—	19.7%	Apr 11, 2018
42Plan	CVE-2018-1012No exploit	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsomicrosoft · windows 10 · CWE-20 pre-auth RCE	High8.8	—	23.2%	Apr 11, 2018
42Plan	CVE-2018-1013No exploit	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsomicrosoft · windows 10 · CWE-20 pre-auth RCE	High8.8	—	23.2%	Apr 11, 2018
42Plan	CVE-2018-1015No exploit	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsomicrosoft · windows 10 · CWE-20 pre-auth RCE	High8.8	—	23.2%	Apr 11, 2018
42Plan	CVE-2018-1016No exploit	A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microsomicrosoft · windows 10 · CWE-20 pre-auth RCE	High8.8	—	23.2%	Apr 11, 2018
35Monitor	CVE-2018-1018No exploit	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cormicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High7.5	—	15.4%	Apr 11, 2018
35Monitor	CVE-2018-1019No exploit	A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Cmicrosoft · edge · CWE-787 pre-auth RCE Memory safety	High7.5	—	15.4%	Apr 11, 2018
35Monitor	CVE-2018-1020No exploit	A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cormicrosoft · internet explorer · CWE-787 pre-auth RCE Memory safety	High7.5	—	16.5%	Apr 11, 2018
34Monitor	CVE-2018-1023No exploit	A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corrmicrosoft · chakracore · CWE-787 pre-auth RCE Memory safety	High7.5	—	14.9%	Apr 11, 2018
47Plan	CVE-2018-1026Proof of concept	A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka microsoft · office pre-auth RCE	High8.8	—	40.9%	Apr 11, 2018
37Monitor	CVE-2018-1027No exploit	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "microsoft · excel RCE	High7.8	—	19.0%	Apr 11, 2018
41Plan	CVE-2018-1028No exploit	A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Mimicrosoft · excel services · CWE-94 pre-auth RCE	High8.8	—	18.9%	Apr 11, 2018
37Monitor	CVE-2018-1029No exploit	A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "microsoft · excel RCE	High7.8	—	20.7%	Apr 11, 2018
42Plan	CVE-2018-1030No exploit	A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka microsoft · office pre-auth RCE	High8.8	—	24.1%	Apr 11, 2018
44Plan	CVE-2018-9118Proof of concept	exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a 99robots · wp background takeover advertisements · CWE-22 Pre-auth Path traversal	High7.5	—	46.2%	Apr 12, 2018
26Monitor	CVE-2018-9842Proof of concept	CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replaying a logon message.cyberark · password vault · CWE-200 Pre-auth Info leak	Medium5.3	—	15.9%	Apr 12, 2018
44Plan	CVE-2018-9843Proof of concept	The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via acyberark · password vault · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	16.7%	Apr 12, 2018
32Monitor	CVE-2018-5511Proof of concept	On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (Tf5 · big-ip local traffic manager · CWE-470	High7.2	—	14.2%	Apr 13, 2018
40Plan	CVE-2017-0358Weaponized	ntfs-3g: Modprobe influence vulnerability via environment variablestuxera · ntfs-3g · CWE-269 Local privilege escalation	High7.8	—	2.1%	Apr 13, 2018
60This week	CVE-2017-0372Weaponized	Parameters injection in SyntaxHighlight results in multiple vulnerabilitiesmediawiki · mediawiki · CWE-74 Pre-auth	Critical9.8	—	11.2%	Apr 13, 2018
44Plan	CVE-2018-6546Proof of concept	plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, eplays.tv · plays.tv · CWE-287 Pre-auth Auth bypass	Critical9.8	—	17.1%	Apr 13, 2018
35Monitor	CVE-2014-2069Proof of concept	Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname in the file parameteshtery.she7ata · eshtery cms · CWE-22 Pre-auth Path traversal	High7.5	—	15.4%	Apr 16, 2018
34Monitor	CVE-2018-10070Proof of concept	A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAMmikrotik · router firmware · CWE-400 Pre-auth Denial of service	High7.5	—	12.5%	Apr 16, 2018
26Monitor	CVE-2018-0737No exploit	Cache timing vulnerability in RSA Key Generationopenssl · openssl · CWE-327 Pre-auth Weak crypto	Medium5.9	—	11.5%	Apr 16, 2018
79This week	CVE-2018-5430Weaponized	TIBCO JasperReports Server Information Disclosure Vulnerabilitytibco · jasperreports server · CWE-22 Path traversal	High8.8	KEV	48.0%	Apr 17, 2018
42Plan	CVE-2018-6913No exploit	Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a larperl · perl · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	10.6%	Apr 17, 2018
60This week	CVE-2018-8733Weaponized	Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated attanagios · nagios xi · CWE-89 Pre-auth Auth bypass SQL injection	Critical9.8	—	26.5%	Apr 17, 2018
60This week	CVE-2018-8734Weaponized	SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrarnagios · nagios xi · CWE-89 pre-auth RCE SQL injection	Critical9.8	—	53.7%	Apr 17, 2018
54Plan	CVE-2018-8735Weaponized	Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commandsnagios · nagios xi · CWE-78 RCE Command injection	High8.8	—	63.5%	Apr 17, 2018
49Plan	CVE-2018-8736Weaponized	A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability escanagios · nagios xi RCE	High8.8	—	45.6%	Apr 17, 2018
40Plan	CVE-2018-8831Proof of concept	A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the cokodi · kodi · CWE-79 Pre-auth XSS	Medium6.1	—	52.0%	Apr 18, 2018
99Now	CVE-2018-2628Weaponized	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).oracle · weblogic server · CWE-502 Pre-auth Deserialization	Critical9.8	KEV	99.9%	Apr 18, 2018
43Plan	CVE-2018-2791Proof of concept	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).oracle · webcenter sites Pre-auth	High8.2	—	38.2%	Apr 18, 2018
25Monitor	CVE-2018-2799No exploit	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP).oracle · jdk Pre-auth Denial of service	Medium5.3	—	14.7%	Apr 18, 2018
42Plan	CVE-2018-2879Proof of concept	Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine).oracle · access manager Pre-auth	Critical9.0	—	21.3%	Apr 18, 2018
55Plan	CVE-2018-1143No exploit	A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP requebelkin · n750 firmware · CWE-78 pre-auth RCE Command injection	Critical9.8	—	54.0%	Apr 19, 2018
46Plan	CVE-2018-1145No exploit	A remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP requesbelkin · n750 firmware · CWE-119 Pre-auth Memory safety	Critical9.8	—	24.1%	Apr 19, 2018
38Monitor	CVE-2018-1146No exploit	A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.cbelkin · n750 firmware Pre-auth	High7.5	—	28.2%	Apr 19, 2018
41Plan	CVE-2018-3843No exploit	An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotatifoxitsoftware · foxit reader · CWE-704 pre-auth RCE	High8.8	—	21.5%	Apr 19, 2018
43Plan	CVE-2018-10201Proof of concept	An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11.ncomputing · vspace pro · CWE-22 Pre-auth Path traversal	High7.5	—	43.7%	Apr 20, 2018
62This week	CVE-2018-9059Weaponized	Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious logisharing-file · easy file sharing web server · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	77.2%	Apr 20, 2018
43Plan	CVE-2018-10285Proof of concept	The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms.ericssonlg · ipecs nms · CWE-732 Pre-auth Auth bypass	Critical9.8	—	12.5%	Apr 22, 2018
34Monitor	CVE-2018-8880Proof of concept	Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP informatlutron · quantum bacnet integration firmware · CWE-200 Pre-auth Info leak	High7.5	—	13.3%	Apr 23, 2018
37Monitor	CVE-2016-9587Proof of concept	Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems.ansible · ansible · CWE-20 pre-auth RCE	High8.1	—	17.1%	Apr 24, 2018
46Plan	CVE-2017-2885No exploit	An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58.gnome · libsoup · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	23.1%	Apr 24, 2018
32Monitor	CVE-2018-8716Proof of concept	WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers.wso2 · identity server · CWE-79 XSS	Medium5.4	—	38.1%	Apr 25, 2018

CVE-2018-6849
60This week
In the WebRTC component in DuckDuckGo 4.2.0, after visiting a web site that attempts to gather complete client information (such as https://
MediumCVSS 4.3WeaponizedEPSS 28%
- Pre-auth
- Info leak
duckduckgo · duckduckgoApr 1, 2018
CVE-2018-9230
43Plan
In OpenResty through 1.13.6.1, URI parameters are obtained using the ngx.req.get_uri_args and ngx.req.get_post_args functions that ignore pa
CriticalCVSS 9.8No exploitEPSS 13%
- Pre-auth
- SQL injection
openresty · openrestyApr 2, 2018
CVE-2018-4121
39Monitor
An issue was discovered in certain Apple products.
HighCVSS 8.8Proof of conceptEPSS 13%
- pre-auth RCE
- Memory safety
apple · safariApr 3, 2018
CVE-2018-4162
60This week
An issue was discovered in certain Apple products.
HighCVSS 8.8WeaponizedEPSS 37%
- pre-auth RCE
- Memory safety
apple · safariApr 3, 2018
CVE-2018-6914
33Monitor
Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2
HighCVSS 7.5No exploitEPSS 10%
- Pre-auth
- Path traversal
ruby-lang · rubyApr 3, 2018
CVE-2018-9234
31Monitor
GnuPG 2.2.4 and 2.2.5 does not enforce a configuration in which key certification requires an offline master Certify key, which results in a
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
gnupg · gnupgApr 3, 2018
CVE-2016-10718
34Monitor
Brave Browser before 0.13.0 allows a tab to close itself even if the tab was not opened by a script, resulting in denial of service.
HighCVSS 7.5Proof of conceptEPSS 12%
- Pre-auth
- Denial of service
brave · brave browserApr 3, 2018
CVE-2018-9205
47Plan
Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.
HighCVSS 7.5Proof of conceptEPSS 55%
- Pre-auth
- Path traversal
drupal · avatar uploaderApr 4, 2018
CVE-2018-9248
43Plan
FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass via a "Cookie: Name=0admin" header.
CriticalCVSS 9.8Proof of conceptEPSS 14%
- Pre-auth
- Auth bypass
fiberhome · vdsl2 modem hg 150-ub firmwareApr 4, 2018
CVE-2018-0986
54Plan
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, l
HighCVSS 8.8Proof of conceptEPSS 63%
- pre-auth RCE
- Memory safety
microsoft · exchange serverApr 4, 2018
CVE-2018-8719
26Monitor
An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress.
MediumCVSS 5.3Proof of conceptEPSS 15%
- Pre-auth
- Info leak
wpsecurityauditlog · wp security audit logApr 4, 2018
CVE-2018-9126
54Plan
The DNNArticle module 11 for DNN (formerly DotNetNuke) allows remote attackers to read the web.config file, and consequently discover databa
CriticalCVSS 9.8Proof of conceptEPSS 48%
- Pre-auth
- Info leak
zldnn · dnnarticleApr 4, 2018
CVE-2016-8371
32Monitor
The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism is enabled.
HighCVSS 7.3Proof of conceptEPSS 10%
- Pre-auth
phoenixcontact · ilc plcs firmwareApr 5, 2018
CVE-2016-8380
32Monitor
The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.
HighCVSS 7.3Proof of conceptEPSS 10%
- Pre-auth
- Auth bypass
phoenixcontact · ilc plcs firmwareApr 5, 2018
CVE-2017-14462
50Plan
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl
CriticalCVSS 9.8No exploitEPSS 35%
- Pre-auth
rockwellautomation · micrologix 1400 b firmwareApr 5, 2018
CVE-2017-14463
51Plan
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl
CriticalCVSS 9.8No exploitEPSS 38%
- Pre-auth
rockwellautomation · micrologix 1400 b firmwareApr 5, 2018
CVE-2017-14464
50Plan
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl
CriticalCVSS 9.8No exploitEPSS 37%
- Pre-auth
rockwellautomation · micrologix 1400 b firmwareApr 5, 2018
CVE-2017-14465
50Plan
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl
CriticalCVSS 9.8No exploitEPSS 35%
- Pre-auth
rockwellautomation · micrologix 1400 b firmwareApr 5, 2018
CVE-2017-14466
50Plan
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl
CriticalCVSS 9.8No exploitEPSS 37%
- Pre-auth
rockwellautomation · micrologix 1400 b firmwareApr 5, 2018
CVE-2017-14467
50Plan
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl
CriticalCVSS 9.8No exploitEPSS 37%
- Pre-auth
rockwellautomation · micrologix 1400 b firmwareApr 5, 2018
CVE-2017-14468
50Plan
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl
CriticalCVSS 9.8No exploitEPSS 37%
- Pre-auth
rockwellautomation · micrologix 1400 b firmwareApr 5, 2018
CVE-2017-14469
50Plan
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl
CriticalCVSS 9.8No exploitEPSS 37%
- Pre-auth
rockwellautomation · micrologix 1400 b firmwareApr 5, 2018
CVE-2017-14470
50Plan
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl
CriticalCVSS 9.8No exploitEPSS 37%
- Pre-auth
rockwellautomation · micrologix 1400 b firmwareApr 5, 2018
CVE-2017-14471
50Plan
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl
CriticalCVSS 9.8No exploitEPSS 37%
- Pre-auth
rockwellautomation · micrologix 1400 b firmwareApr 5, 2018
CVE-2017-14472
50Plan
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl
CriticalCVSS 9.8No exploitEPSS 37%
- Pre-auth
rockwellautomation · micrologix 1400 b firmwareApr 5, 2018
CVE-2017-14473
50Plan
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Microl
CriticalCVSS 9.8No exploitEPSS 37%
- Pre-auth
rockwellautomation · micrologix 1400 b firmwareApr 5, 2018
CVE-2018-1271
33Monitor
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configu
MediumCVSS 5.9Proof of conceptEPSS 34%
- Pre-auth
- Path traversal
vmware · spring frameworkApr 6, 2018
CVE-2018-1270
62This week
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose
CriticalCVSS 9.8Proof of conceptEPSS 77%
- pre-auth RCE
vmware · spring frameworkApr 6, 2018
CVE-2018-1308
36Monitor
This vulnerability in Apache Solr 1.2 to 6.6.2 and 7.0.0 to 7.2.1 relates to an XML external entity expansion (XXE) in the `&dataConfig=<inl
HighCVSS 7.5No exploitEPSS 20%
- Pre-auth
- XXE
apache · solrApr 9, 2018
CVE-2018-1217
54Plan
Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1
CriticalCVSS 9.8Proof of conceptEPSS 50%
- Pre-auth
- Broken access control (IDOR)
dell · emc avamarApr 9, 2018
CVE-2014-1889
29Monitor
The Group creation process in the Buddypress plugin before 1.9.2 for WordPress allows remote authenticated users to gain control of arbitrar
MediumCVSS 6.5Proof of conceptEPSS 10%
buddypress · buddypressApr 10, 2018
CVE-2018-9995
64This week
TBK DVR4104 and DVR4216 devices, as well as Novo, CeNova, QSee, Pulnix, XVR 5 in 1, Securus, Night OWL, DVR Login, HVR Login, and MDVR Login
CriticalCVSS 9.8Proof of conceptEPSS 82%
- Pre-auth
- Auth bypass
tbkvision · tbk-dvr4216 firmwareApr 10, 2018
CVE-2018-1273
98Now
Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerabilit
CriticalCVSS 9.8KEVWeaponizedEPSS 96%
- pre-auth RCE
broadcom · spring data commonsApr 11, 2018
CVE-2018-1275
56Plan
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose
CriticalCVSS 9.8No exploitEPSS 57%
- pre-auth RCE
vmware · spring frameworkApr 11, 2018
CVE-2017-14459
43Plan
An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IE
CriticalCVSS 9.8Proof of conceptEPSS 12%
- pre-auth RCE
- Command injection
moxa · awk-3131a firmwareApr 11, 2018
CVE-2018-10054
45Plan
H2 1.4.197, as used in Datomic before 0.9.5697 and other products, allows remote code execution because CREATE ALIAS can execute arbitrary J
HighCVSS 8.8WeaponizedEPSS 33%
- RCE
cognitect · datomicApr 11, 2018
CVE-2018-0870
35Monitor
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · internet explorerApr 11, 2018
CVE-2018-0920
37Monitor
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "
HighCVSS 7.8No exploitEPSS 20%
- RCE
microsoft · excelApr 11, 2018
CVE-2018-0956
34Monitor
A denial of service vulnerability exists in the HTTP 2.0 protocol stack (HTTP.sys) when HTTP.sys improperly parses specially crafted HTTP 2.
HighCVSS 7.5No exploitEPSS 13%
- Pre-auth
- Denial of service
microsoft · windows 10Apr 11, 2018
CVE-2018-0967
27Monitor
A denial of service vulnerability exists in the way that Windows SNMP Service handles malformed SNMP traps, aka "Windows SNMP Service Denial
MediumCVSS 5.3No exploitEPSS 18%
- Denial of service
microsoft · windows 10Apr 11, 2018
CVE-2018-0979
35Monitor
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeApr 11, 2018
CVE-2018-0980
50Plan
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
HighCVSS 7.5Proof of conceptEPSS 66%
- pre-auth RCE
- Memory safety
microsoft · edgeApr 11, 2018
CVE-2018-0988
35Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · internet explorerApr 11, 2018
CVE-2018-0990
35Monitor
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeApr 11, 2018
CVE-2018-0991
35Monitor
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · internet explorerApr 11, 2018
CVE-2018-0993
35Monitor
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeApr 11, 2018
CVE-2018-0994
35Monitor
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeApr 11, 2018
CVE-2018-0995
35Monitor
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeApr 11, 2018
CVE-2018-0996
34Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip
HighCVSS 7.5No exploitEPSS 14%
- pre-auth RCE
- Memory safety
microsoft · internet explorerApr 11, 2018
CVE-2018-0997
35Monitor
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · internet explorerApr 11, 2018
CVE-2018-1001
34Monitor
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scrip
HighCVSS 7.5No exploitEPSS 14%
- pre-auth RCE
- Memory safety
microsoft · internet explorerApr 11, 2018
CVE-2018-1003
38Monitor
A buffer overflow vulnerability exists in the Microsoft JET Database Engine that could allow remote code execution on an affected system, ak
HighCVSS 7.8No exploitEPSS 22%
- RCE
- Memory safety
microsoft · windows 10Apr 11, 2018
CVE-2018-1004
41Plan
A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Rem
HighCVSS 8.8No exploitEPSS 18%
- pre-auth RCE
- Memory safety
microsoft · internet explorerApr 11, 2018
CVE-2018-1010
47Plan
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso
HighCVSS 8.8Proof of conceptEPSS 39%
- pre-auth RCE
microsoft · windows 10Apr 11, 2018
CVE-2018-1011
37Monitor
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "
HighCVSS 7.8No exploitEPSS 19%
- RCE
microsoft · excelApr 11, 2018
CVE-2018-1012
42Plan
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso
HighCVSS 8.8No exploitEPSS 23%
- pre-auth RCE
microsoft · windows 10Apr 11, 2018
CVE-2018-1013
42Plan
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso
HighCVSS 8.8No exploitEPSS 23%
- pre-auth RCE
microsoft · windows 10Apr 11, 2018
CVE-2018-1015
42Plan
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso
HighCVSS 8.8No exploitEPSS 23%
- pre-auth RCE
microsoft · windows 10Apr 11, 2018
CVE-2018-1016
42Plan
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Microso
HighCVSS 8.8No exploitEPSS 23%
- pre-auth RCE
microsoft · windows 10Apr 11, 2018
CVE-2018-1018
35Monitor
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · internet explorerApr 11, 2018
CVE-2018-1019
35Monitor
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "C
HighCVSS 7.5No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · edgeApr 11, 2018
CVE-2018-1020
35Monitor
A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor
HighCVSS 7.5No exploitEPSS 16%
- pre-auth RCE
- Memory safety
microsoft · internet explorerApr 11, 2018
CVE-2018-1023
34Monitor
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corr
HighCVSS 7.5No exploitEPSS 14%
- pre-auth RCE
- Memory safety
microsoft · chakracoreApr 11, 2018
CVE-2018-1026
47Plan
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka
HighCVSS 8.8Proof of conceptEPSS 40%
- pre-auth RCE
microsoft · officeApr 11, 2018
CVE-2018-1027
37Monitor
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "
HighCVSS 7.8No exploitEPSS 19%
- RCE
microsoft · excelApr 11, 2018
CVE-2018-1028
41Plan
A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Mi
HighCVSS 8.8No exploitEPSS 18%
- pre-auth RCE
microsoft · excel servicesApr 11, 2018
CVE-2018-1029
37Monitor
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "
HighCVSS 7.8No exploitEPSS 20%
- RCE
microsoft · excelApr 11, 2018
CVE-2018-1030
42Plan
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka
HighCVSS 8.8No exploitEPSS 24%
- pre-auth RCE
microsoft · officeApr 11, 2018
CVE-2018-9118
44Plan
exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a
HighCVSS 7.5Proof of conceptEPSS 46%
- Pre-auth
- Path traversal
99robots · wp background takeover advertisementsApr 12, 2018
CVE-2018-9842
26Monitor
CyberArk Password Vault before 9.7 allows remote attackers to obtain sensitive information from process memory by replaying a logon message.
MediumCVSS 5.3Proof of conceptEPSS 15%
- Pre-auth
- Info leak
cyberark · password vaultApr 12, 2018
CVE-2018-9843
44Plan
The REST API in CyberArk Password Vault Web Access before 9.9.5 and 10.x before 10.1 allows remote attackers to execute arbitrary code via a
CriticalCVSS 9.8Proof of conceptEPSS 16%
- pre-auth RCE
- Deserialization
cyberark · password vaultApr 12, 2018
CVE-2018-5511
32Monitor
On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (T
HighCVSS 7.2Proof of conceptEPSS 14%
f5 · big-ip local traffic managerApr 13, 2018
CVE-2017-0358
40Plan
ntfs-3g: Modprobe influence vulnerability via environment variables
HighCVSS 7.8WeaponizedEPSS 2%
- Local privilege escalation
tuxera · ntfs-3gApr 13, 2018
CVE-2017-0372
60This week
Parameters injection in SyntaxHighlight results in multiple vulnerabilities
CriticalCVSS 9.8WeaponizedEPSS 11%
- Pre-auth
mediawiki · mediawikiApr 13, 2018
CVE-2018-6546
44Plan
plays_service.exe in the plays.tv service before 1.27.7.0, as distributed in AMD driver-installation packages and Gaming Evolved products, e
CriticalCVSS 9.8Proof of conceptEPSS 17%
- Pre-auth
- Auth bypass
plays.tv · plays.tvApr 13, 2018
CVE-2014-2069
35Monitor
Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname in the file paramet
HighCVSS 7.5Proof of conceptEPSS 15%
- Pre-auth
- Path traversal
eshtery.she7ata · eshtery cmsApr 16, 2018
CVE-2018-10070
34Monitor
A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM
HighCVSS 7.5Proof of conceptEPSS 12%
- Pre-auth
- Denial of service
mikrotik · router firmwareApr 16, 2018
CVE-2018-0737
26Monitor
Cache timing vulnerability in RSA Key Generation
MediumCVSS 5.9No exploitEPSS 11%
- Pre-auth
- Weak crypto
openssl · opensslApr 16, 2018
CVE-2018-5430
79This week
TIBCO JasperReports Server Information Disclosure Vulnerability
HighCVSS 8.8KEVWeaponizedEPSS 48%
- Path traversal
tibco · jasperreports serverApr 17, 2018
CVE-2018-6913
42Plan
Heap-based buffer overflow in the pack function in Perl before 5.26.2 allows context-dependent attackers to execute arbitrary code via a lar
CriticalCVSS 9.8No exploitEPSS 10%
- pre-auth RCE
- Memory safety
perl · perlApr 17, 2018
CVE-2018-8733
60This week
Authentication bypass vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an unauthenticated atta
CriticalCVSS 9.8WeaponizedEPSS 26%
- Pre-auth
- Auth bypass
- SQL injection
nagios · nagios xiApr 17, 2018
CVE-2018-8734
60This week
SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrar
CriticalCVSS 9.8WeaponizedEPSS 53%
- pre-auth RCE
- SQL injection
nagios · nagios xiApr 17, 2018
CVE-2018-8735
54Plan
Remote command execution (RCE) vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrary commands
HighCVSS 8.8WeaponizedEPSS 63%
- RCE
- Command injection
nagios · nagios xiApr 17, 2018
CVE-2018-8736
49Plan
A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability esca
HighCVSS 8.8WeaponizedEPSS 45%
- RCE
nagios · nagios xiApr 17, 2018
CVE-2018-8831
40Plan
A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the co
MediumCVSS 6.1Proof of conceptEPSS 52%
- Pre-auth
- XSS
kodi · kodiApr 18, 2018
CVE-2018-2628
99Now
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).
CriticalCVSS 9.8KEVWeaponizedEPSS 99%
- Pre-auth
- Deserialization
oracle · weblogic serverApr 18, 2018
CVE-2018-2791
43Plan
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI).
HighCVSS 8.2Proof of conceptEPSS 38%
- Pre-auth
oracle · webcenter sitesApr 18, 2018
CVE-2018-2799
25Monitor
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP).
MediumCVSS 5.3No exploitEPSS 14%
- Pre-auth
- Denial of service
oracle · jdkApr 18, 2018
CVE-2018-2879
42Plan
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine).
CriticalCVSS 9.0Proof of conceptEPSS 21%
- Pre-auth
oracle · access managerApr 18, 2018
CVE-2018-1143
55Plan
A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP reque
CriticalCVSS 9.8No exploitEPSS 54%
- pre-auth RCE
- Command injection
belkin · n750 firmwareApr 19, 2018
CVE-2018-1145
46Plan
A remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP reques
CriticalCVSS 9.8No exploitEPSS 24%
- Pre-auth
- Memory safety
belkin · n750 firmwareApr 19, 2018
CVE-2018-1146
38Monitor
A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.c
HighCVSS 7.5No exploitEPSS 28%
- Pre-auth
belkin · n750 firmwareApr 19, 2018
CVE-2018-3843
41Plan
An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotati
HighCVSS 8.8No exploitEPSS 21%
- pre-auth RCE
foxitsoftware · foxit readerApr 19, 2018
CVE-2018-10201
43Plan
An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11.
HighCVSS 7.5Proof of conceptEPSS 43%
- Pre-auth
- Path traversal
ncomputing · vspace proApr 20, 2018
CVE-2018-9059
62This week
Stack-based buffer overflow in Easy File Sharing (EFS) Web Server 7.2 allows remote attackers to execute arbitrary code via a malicious logi
CriticalCVSS 9.8WeaponizedEPSS 77%
- pre-auth RCE
- Memory safety
sharing-file · easy file sharing web serverApr 20, 2018
CVE-2018-10285
43Plan
The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms.
CriticalCVSS 9.8Proof of conceptEPSS 12%
- Pre-auth
- Auth bypass
ericssonlg · ipecs nmsApr 22, 2018
CVE-2018-8880
34Monitor
Lutron Quantum BACnet Integration 2.0 (firmware 3.2.243) doesn't check for correct user authentication before showing the /deviceIP informat
HighCVSS 7.5Proof of conceptEPSS 13%
- Pre-auth
- Info leak
lutron · quantum bacnet integration firmwareApr 23, 2018
CVE-2016-9587
37Monitor
Ansible before versions 2.1.4, 2.2.1 is vulnerable to an improper input validation in Ansible's handling of data sent from client systems.
HighCVSS 8.1Proof of conceptEPSS 17%
- pre-auth RCE
ansible · ansibleApr 24, 2018
CVE-2017-2885
46Plan
An exploitable stack based buffer overflow vulnerability exists in the GNOME libsoup 2.58.
CriticalCVSS 9.8No exploitEPSS 23%
- pre-auth RCE
- Memory safety
gnome · libsoupApr 24, 2018
CVE-2018-8716
32Monitor
WSO2 Identity Server before 5.5.0 has XSS via the dashboard, allowing attacks by low-privileged attackers.
MediumCVSS 5.4Proof of conceptEPSS 38%
- XSS
wso2 · identity serverApr 25, 2018