2018-10-20

2018-10-21

2018-10-22

All (2) Critical (1) High (1) Medium (2)

CVE-2018-18544 MEDIUM POC This Month

There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coders/msl.c in GraphicsMagick before 1.3.31. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Graphicsmagick Imagemagick Leap

NVD GitHub

CVSS 3.0

6.5

EPSS

2.0%

CVE-2018-18545 MEDIUM POC This Month

Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS PHP Fiyo Cms

NVD GitHub

CVSS 3.1

6.1

EPSS

0.8%