Skip to main content
CVE-2018-16975 Sep 12, 21:29 CRITICAL POC PATCH Act Now

An issue was discovered in Elefant CMS before 2.0.7. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP RCE Code Injection Elefantcms Elefant
NVD GitHub
CVSS 3.0
9.8
EPSS
3.7%
CVE-2018-16974 Sep 12, 21:29 CRITICAL POC PATCH Act Now

An issue was discovered in Elefant CMS before 2.0.7. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP RCE File Upload Elefantcms Elefant
NVD GitHub
CVSS 3.0
9.8
EPSS
3.6%
CVE-2018-12171 Sep 12, 19:29 CRITICAL Act Now

Privilege escalation in Intel Baseboard Management Controller (BMC) firmware before version 1.43.91f76955 may allow an unprivileged user to potentially execute arbitrary code or perform denial of. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation RCE Denial Of Service Intel Bmc Firmware
NVD
CVSS 3.0
9.8
EPSS
2.1%
CVE-2018-16947 Sep 12, 01:29 CRITICAL Act Now

An issue was discovered in OpenAFS before 1.6.23 and 1.8.x before 1.8.2. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Debian Debian Linux Openafs
NVD
CVSS 3.0
9.8
EPSS
2.6%
CVE-2018-3679 Sep 12, 19:29 CRITICAL Act Now

Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges. Rated critical severity (CVSS 9.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Intel Data Center Manager
NVD
CVSS 3.0
9.6
EPSS
1.2%
CVE-2018-13799 Sep 12, 13:29 CRITICAL Act Now

A vulnerability has been identified in SIMATIC WinCC OA V3.14 and prior (All versions < V3.14-P021). Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Siemens Simatic Wincc Open Architecture
NVD
CVSS 3.0
9.1
EPSS
2.3%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy