Skip to main content
CVE-2018-7665 CRITICAL POC THREAT Emergency

An issue was discovered in ClipBucket before 4.0.0 Release 4902. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

File Upload PHP Clipbucket
NVD
CVSS 3.0
9.8
EPSS
16.2%
CVE-2018-7667 CRITICAL POC PATCH Act Now

Adminer through 4.3.1 has SSRF via the server parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SSRF Adminer
NVD
CVSS 3.0
9.8
EPSS
4.5%
CVE-2018-7666 CRITICAL POC Act Now

An issue was discovered in ClipBucket before 4.0.0 Release 4902. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi PHP Clipbucket
NVD
CVSS 3.0
9.8
EPSS
1.3%
CVE-2018-7664 CRITICAL POC Act Now

An issue was discovered in ClipBucket before 4.0.0 Release 4902. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Command Injection Clipbucket
NVD
CVSS 3.0
9.8
EPSS
2.0%
CVE-2018-7716 CRITICAL Act Now

PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com.privat.vpn.helper privileged helper tool. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Apple Privatevpn
NVD GitHub
CVSS 3.0
9.8
EPSS
2.4%
CVE-2018-7715 CRITICAL Act Now

PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com.privat.vpn.helper privileged helper tool. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation RCE Apple Privatevpn
NVD GitHub
CVSS 3.0
9.8
EPSS
2.4%
CVE-2018-7493 CRITICAL Act Now

CactusVPN through 6.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Apple Cactusvpn
NVD GitHub
CVSS 3.0
9.8
EPSS
1.8%
CVE-2018-5455 CRITICAL PATCH Act Now

A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Oncell G3110 Hspa Firmware Oncell G3110 Hspa T Firmware Oncell G3150 Hspa Firmware Oncell G3150 Hspa T Firmware
NVD
CVSS 3.0
9.8
EPSS
1.6%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy