По дате публикации
Эксплуатируемые и новые серьёзные CVE: февраль 2018 г.
166 записей · 3 KEV. В порядке публикации.
В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.
Границы месяца считаются по UTC, как и дата публикации на странице записи.
Страница 2 из 2
| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
45В плане | CVE-2018-6583Proof of concept | SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request.quanticalabs · timetable responsive schedule · CWE-89 | Критическая9,8 | — | 19,1 % | 17 февр. 2018 г. |
45В плане | CVE-2018-5378Эксплойта нет | The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute lequagga · quagga · CWE-119 | Средняя5,9 | — | 74,2 % | 19 февр. 2018 г. |
51В плане | CVE-2018-5379Эксплойта нет | The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing clustquagga · quagga · CWE-415 | Критическая9,8 | — | 38,4 % | 19 февр. 2018 г. |
21Наблюдать | CVE-2018-5380Эксплойта нет | The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer vaquagga · quagga · CWE-125 | Средняя4,3 | — | 14,8 % | 19 февр. 2018 г. |
39Наблюдать | CVE-2018-5381Эксплойта нет | The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgpquagga · quagga · CWE-228 | Высокая7,5 | — | 30,1 % | 19 февр. 2018 г. |
61На этой неделе | CVE-2018-7251Proof of concept | An issue was discovered in config/error.php in Anchor 0.12.3.anchorcms · anchor · CWE-200 | Критическая9,8 | — | 71,8 % | 19 февр. 2018 г. |
46В плане | CVE-2017-7376Proof of concept | Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling xmlsoft · libxml2 · CWE-119 | Критическая9,8 | — | 22,9 % | 19 февр. 2018 г. |
36Наблюдать | CVE-2016-6272Proof of concept | XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display stringepic · mychart · CWE-91 | Высокая7,5 | — | 20,8 % | 20 февр. 2018 г. |
35Наблюдать | CVE-2017-12161Эксплойта нет | It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset requekeycloak · keycloak · CWE-602 | Высокая8,8 | — | 1,3 % | 21 февр. 2018 г. |
50В плане | CVE-2018-7284Proof of concept | A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk thrdigium · asterisk · CWE-119 | Высокая7,5 | — | 66,1 % | 21 февр. 2018 г. |
42В плане | CVE-2018-7286Proof of concept | An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-certdigium · asterisk | Средняя6,5 | — | 52,7 % | 21 февр. 2018 г. |
26Наблюдать | CVE-2018-7287Эксплойта нет | An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1.digium · asterisk · CWE-754 | Средняя5,9 | — | 11,4 % | 21 февр. 2018 г. |
45В плане | CVE-2018-7313Proof of concept | SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter.cwjoomla · cw tags · CWE-89 | Критическая9,8 | — | 19,1 % | 22 февр. 2018 г. |
58В плане | CVE-2018-7297Proof of concept | Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/writeq-3 · homematic central control unit ccu2 firmware | Критическая9,8 | — | 64,2 % | 22 февр. 2018 г. |
48В плане | CVE-2018-7300Proof of concept | Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earlieq-3 · homematic ccu2 firmware · CWE-22 | Критическая9,8 | — | 30,5 % | 22 февр. 2018 г. |
56В плане | CVE-2018-7314Proof of concept | SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-64mlwebtechnologies · prayercenter · CWE-89 | Критическая9,8 | — | 57,7 % | 22 февр. 2018 г. |
54В плане | CVE-2014-3206Proof of concept | Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or thseagate · blackarmor nas 220 firmware · CWE-20 | Критическая9,8 | — | 51,0 % | 23 февр. 2018 г. |
30Наблюдать | CVE-2018-1305Proof of concept | Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 tapache · tomcat | Средняя6,5 | — | 14,4 % | 23 февр. 2018 г. |
24Наблюдать | CVE-2017-18195Proof of concept | An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0.concretecms · concrete cms | Средняя5,3 | — | 11,0 % | 26 февр. 2018 г. |
34Наблюдать | CVE-2018-7448Proof of concept | Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote attackers to injectcmsmadesimple · cms made simple · CWE-78 | Высокая7,5 | — | 12,7 % | 26 февр. 2018 г. |
45В плане | CVE-2018-7489Proof of concept | FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution becausefasterxml · jackson-databind · CWE-184 | Критическая9,8 | — | 19,7 % | 26 февр. 2018 г. |
51В плане | CVE-2018-7490Proof of concept | uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.unbit · uwsgi · CWE-22 | Высокая7,5 | — | 69,4 % | 26 февр. 2018 г. |
43В плане | CVE-2018-4872Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat | Критическая10,0 | — | 11,5 % | 27 февр. 2018 г. |
48В плане | CVE-2018-4879Proof of concept | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-787 | Критическая9,8 | — | 28,6 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4880Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4881Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4882Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4883Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4884Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 11,2 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4885Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 11,2 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4886Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4887Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
39Наблюдать | CVE-2018-4888Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-416 | Высокая8,8 | — | 12,2 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4889Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
42В плане | CVE-2018-4890Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-787 | Высокая8,8 | — | 24,5 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4891Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
39Наблюдать | CVE-2018-4892Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-416 | Высокая8,8 | — | 12,2 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4893Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4894Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
43В плане | CVE-2018-4895Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-787 | Критическая9,8 | — | 13,6 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4896Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4897Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
40В плане | CVE-2018-4898Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-787 | Высокая8,8 | — | 15,0 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4899Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4900Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
40В плане | CVE-2018-4901Proof of concept | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-787 | Высокая8,8 | — | 16,1 % | 27 февр. 2018 г. |
39Наблюдать | CVE-2018-4902Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-416 | Высокая8,8 | — | 12,2 % | 27 февр. 2018 г. |
33Наблюдать | CVE-2018-4903Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 22,0 % | 27 февр. 2018 г. |
48В плане | CVE-2018-4904Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-787 | Высокая8,8 | — | 42,7 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4905Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 11,2 % | 27 февр. 2018 г. |
32Наблюдать | CVE-2018-4906Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 21,2 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4907Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4908Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4909Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
42В плане | CVE-2018-4910Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-787 | Высокая8,8 | — | 24,5 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4912Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 10,7 % | 27 февр. 2018 г. |
39Наблюдать | CVE-2018-4913Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-416 | Высокая8,8 | — | 13,5 % | 27 февр. 2018 г. |
29Наблюдать | CVE-2018-4914Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-125 | Средняя6,5 | — | 11,2 % | 27 февр. 2018 г. |
40В плане | CVE-2018-4915Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-787 | Высокая8,8 | — | 15,0 % | 27 февр. 2018 г. |
40В плане | CVE-2018-4916Эксплойта нет | An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 andadobe · acrobat · CWE-787 | Высокая8,8 | — | 15,0 % | 27 февр. 2018 г. |
45В плане | CVE-2018-6481Proof of concept | A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code flexense · disksavvy · CWE-119 | Критическая9,8 | — | 20,6 % | 27 февр. 2018 г. |
33Наблюдать | CVE-2018-7467Proof of concept | AxxonSoft Axxon Next has Directory Traversal via an initial /css//..%2f substring in a URI.axxonsoft · next · CWE-22 | Высокая7,5 | — | 10,1 % | 27 февр. 2018 г. |
43В плане | CVE-2018-7264Proof of concept | The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and activepdf · activepdf toolkit · CWE-787 | Критическая9,8 | — | 12,3 % | 28 февр. 2018 г. |
38Наблюдать | CVE-2015-4117Proof of concept | Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup pvestacp · control panel · CWE-78 | Высокая8,8 | — | 10,6 % | 28 февр. 2018 г. |
35Наблюдать | CVE-2015-5079Proof of concept | Directory traversal vulnerability in widgets/logs.php in BlackCat CMS before 1.1.2 allows remote attackers to read arbitrary files via a ..blackcat-cms · blackcat cms · CWE-22 | Высокая7,5 | — | 17,0 % | 28 февр. 2018 г. |
28Наблюдать | CVE-2018-1304Proof of concept | The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4apache · tomcat | Средняя5,9 | — | 17,0 % | 28 февр. 2018 г. |
- CVE-2018-658345В плане
SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request.
КритическаяCVSS 9,8Proof of conceptEPSS 19 %quanticalabs · timetable responsive schedule17 февр. 2018 г.
- CVE-2018-537845В плане
The Quagga BGP daemon (bgpd) prior to version 1.2.3 does not properly bounds check the data sent with a NOTIFY to a peer, if an attribute le
СредняяCVSS 5,9Эксплойта нетEPSS 74 %quagga · quagga19 февр. 2018 г.
- CVE-2018-537951В плане
The Quagga BGP daemon (bgpd) prior to version 1.2.3 can double-free memory when processing certain forms of UPDATE message, containing clust
КритическаяCVSS 9,8Эксплойта нетEPSS 38 %quagga · quagga19 февр. 2018 г.
- CVE-2018-538021Наблюдать
The Quagga BGP daemon (bgpd) prior to version 1.2.3 can overrun internal BGP code-to-string conversion tables used for debug by 1 pointer va
СредняяCVSS 4,3Эксплойта нетEPSS 14 %quagga · quagga19 февр. 2018 г.
- CVE-2018-538139Наблюдать
The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp
ВысокаяCVSS 7,5Эксплойта нетEPSS 30 %quagga · quagga19 февр. 2018 г.
- CVE-2018-725161На этой неделе
An issue was discovered in config/error.php in Anchor 0.12.3.
КритическаяCVSS 9,8Proof of conceptEPSS 71 %anchorcms · anchor19 февр. 2018 г.
- CVE-2017-737646В плане
Buffer overflow in libxml2 allows remote attackers to execute arbitrary code by leveraging an incorrect limit for port values when handling
КритическаяCVSS 9,8Proof of conceptEPSS 22 %xmlsoft · libxml219 февр. 2018 г.
- CVE-2016-627236Наблюдать
XPath injection vulnerability in Epic MyChart allows remote attackers to access contents of an XML document containing static display string
ВысокаяCVSS 7,5Proof of conceptEPSS 20 %epic · mychart20 февр. 2018 г.
- CVE-2017-1216135Наблюдать
It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset reque
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %keycloak · keycloak21 февр. 2018 г.
- CVE-2018-728450В плане
A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk thr
ВысокаяCVSS 7,5Proof of conceptEPSS 66 %digium · asterisk21 февр. 2018 г.
- CVE-2018-728642В плане
An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert
СредняяCVSS 6,5Proof of conceptEPSS 52 %digium · asterisk21 февр. 2018 г.
- CVE-2018-728726Наблюдать
An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1.
СредняяCVSS 5,9Эксплойта нетEPSS 11 %digium · asterisk21 февр. 2018 г.
- CVE-2018-731345В плане
SQL Injection exists in the CW Tags 2.0.6 component for Joomla! via the searchtext array parameter.
КритическаяCVSS 9,8Proof of conceptEPSS 19 %cwjoomla · cw tags22 февр. 2018 г.
- CVE-2018-729758В плане
Remote Code Execution in the TCL script interpreter in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to obtain read/writ
КритическаяCVSS 9,8Proof of conceptEPSS 64 %eq-3 · homematic central control unit ccu2 firmware22 февр. 2018 г.
- CVE-2018-730048В плане
Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earli
КритическаяCVSS 9,8Proof of conceptEPSS 30 %eq-3 · homematic ccu2 firmware22 февр. 2018 г.
- CVE-2018-731456В плане
SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-64
КритическаяCVSS 9,8Proof of conceptEPSS 57 %mlwebtechnologies · prayercenter22 февр. 2018 г.
- CVE-2014-320654В плане
Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or th
КритическаяCVSS 9,8Proof of conceptEPSS 51 %seagate · blackarmor nas 220 firmware23 февр. 2018 г.
- CVE-2018-130530Наблюдать
Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 t
СредняяCVSS 6,5Proof of conceptEPSS 14 %apache · tomcat23 февр. 2018 г.
- CVE-2017-1819524Наблюдать
An issue was discovered in tools/conversations/view_ajax.php in Concrete5 before 8.3.0.
СредняяCVSS 5,3Proof of conceptEPSS 11 %concretecms · concrete cms26 февр. 2018 г.
- CVE-2018-744834Наблюдать
Remote code execution vulnerability in /cmsms-2.1.6-install.php/index.php in CMS Made Simple version 2.1.6 allows remote attackers to inject
ВысокаяCVSS 7,5Proof of conceptEPSS 12 %cmsmadesimple · cms made simple26 февр. 2018 г.
- CVE-2018-748945В плане
FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because
КритическаяCVSS 9,8Proof of conceptEPSS 19 %fasterxml · jackson-databind26 февр. 2018 г.
- CVE-2018-749051В плане
uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.
ВысокаяCVSS 7,5Proof of conceptEPSS 69 %unbit · uwsgi26 февр. 2018 г.
- CVE-2018-487243В плане
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
КритическаяCVSS 10,0Эксплойта нетEPSS 11 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-487948В плане
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
КритическаяCVSS 9,8Proof of conceptEPSS 28 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-488029Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-488129Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-488229Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-488329Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-488429Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 11 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-488529Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 11 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-488629Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-488729Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-488839Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
ВысокаяCVSS 8,8Эксплойта нетEPSS 12 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-488929Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-489042В плане
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
ВысокаяCVSS 8,8Эксплойта нетEPSS 24 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-489129Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-489239Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
ВысокаяCVSS 8,8Эксплойта нетEPSS 12 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-489329Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-489429Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-489543В плане
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
КритическаяCVSS 9,8Эксплойта нетEPSS 13 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-489629Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-489729Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-489840В плане
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
ВысокаяCVSS 8,8Эксплойта нетEPSS 15 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-489929Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-490029Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-490140В плане
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
ВысокаяCVSS 8,8Proof of conceptEPSS 16 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-490239Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
ВысокаяCVSS 8,8Эксплойта нетEPSS 12 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-490333Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 22 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-490448В плане
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
ВысокаяCVSS 8,8Эксплойта нетEPSS 42 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-490529Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 11 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-490632Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 21 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-490729Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-490829Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-490929Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-491042В плане
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
ВысокаяCVSS 8,8Эксплойта нетEPSS 24 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-491229Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 10 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-491339Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
ВысокаяCVSS 8,8Эксплойта нетEPSS 13 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-491429Наблюдать
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
СредняяCVSS 6,5Эксплойта нетEPSS 11 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-491540В плане
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
ВысокаяCVSS 8,8Эксплойта нетEPSS 15 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-491640В плане
An issue was discovered in Adobe Acrobat Reader 2018.009.20050 and earlier versions, 2017.011.30070 and earlier versions, 2015.006.30394 and
ВысокаяCVSS 8,8Эксплойта нетEPSS 15 %adobe · acrobat27 февр. 2018 г.
- CVE-2018-648145В плане
A buffer overflow vulnerability in the control protocol of Disk Savvy Enterprise v10.4.18 allows remote attackers to execute arbitrary code
КритическаяCVSS 9,8Proof of conceptEPSS 20 %flexense · disksavvy27 февр. 2018 г.
- CVE-2018-746733Наблюдать
AxxonSoft Axxon Next has Directory Traversal via an initial /css//..%2f substring in a URI.
ВысокаяCVSS 7,5Proof of conceptEPSS 10 %axxonsoft · next27 февр. 2018 г.
- CVE-2018-726443В плане
The Pictview image processing library embedded in the ActivePDF toolkit through 2018.1.0.18321 is prone to multiple out of bounds write and
КритическаяCVSS 9,8Proof of conceptEPSS 12 %activepdf · activepdf toolkit28 февр. 2018 г.
- CVE-2015-411738Наблюдать
Vesta Control Panel before 0.9.8-14 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the backup p
ВысокаяCVSS 8,8Proof of conceptEPSS 10 %vestacp · control panel28 февр. 2018 г.
- CVE-2015-507935Наблюдать
Directory traversal vulnerability in widgets/logs.php in BlackCat CMS before 1.1.2 allows remote attackers to read arbitrary files via a ..
ВысокаяCVSS 7,5Proof of conceptEPSS 17 %blackcat-cms · blackcat cms28 февр. 2018 г.
- CVE-2018-130428Наблюдать
The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4
СредняяCVSS 5,9Proof of conceptEPSS 17 %apache · tomcat28 февр. 2018 г.