Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2018-02-19 CVE-2017-18191 An issue was discovered in OpenStack Nova 15.x through 15.1.0 and 16.x through 16.1.1.
network
low complexity
openstack redhat
7.5
2018-02-19 CVE-2018-7219 Cross-Site Request Forgery (CSRF) vulnerability in 5None Nonecms 1.3.0
application/admin/controller/Admin.php in NoneCms 1.3.0 has CSRF, as demonstrated by changing an admin password or adding an account via a public/index.php/admin/admin/edit.html request.
network
low complexity
5none CWE-352
8.8
2018-02-19 CVE-2018-1411 Unspecified vulnerability in IBM Client Application Access and Notes
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system.
local
low complexity
ibm
7.8
2018-02-19 CVE-2018-1410 Unspecified vulnerability in IBM Client Application Access and Notes
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system.
local
low complexity
ibm
7.8
2018-02-19 CVE-2018-1409 Unspecified vulnerability in IBM Client Application Access and Notes
IBM Notes Diagnostics (IBM Client Application Access and IBM Notes) could allow a local user to execute commands on the system.
local
low complexity
ibm
7.8
2018-02-19 CVE-2017-16756 Cross-Site Request Forgery (CSRF) vulnerability in Userscape Helpspot
An issue was discovered in Userscape HelpSpot before 4.7.2.
network
low complexity
userscape CWE-352
8.8
2018-02-19 CVE-2018-5381 Infinite Loop vulnerability in multiple products
The Quagga BGP daemon (bgpd) prior to version 1.2.3 has a bug in its parsing of "Capabilities" in BGP OPEN messages, in the bgp_packet.c:bgp_capability_msg_parse function.
network
low complexity
quagga canonical debian siemens CWE-835
7.5
2018-02-18 CVE-2018-7217 Unrestricted Upload of File with Dangerous Type vulnerability in Tejari Bravo Solution
In Bravo Tejari Procurement Portal, uploaded files are not properly validated by the application either on the client or the server side.
network
low complexity
tejari CWE-434
8.8
2018-02-18 CVE-2018-7216 Cross-Site Request Forgery (CSRF) vulnerability in Tejari Bravo Solution
Cross-site request forgery (CSRF) vulnerability in esop/toolkit/profile/regData.do in Bravo Tejari Procurement Portal allows remote authenticated users to hijack the authentication of application users for requests that modify their personal data by leveraging lack of anti-CSRF tokens.
network
low complexity
tejari CWE-352
8.0
2018-02-18 CVE-2018-7211 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Idashboards
An issue was discovered in iDashboards 9.6b.
network
high complexity
idashboards CWE-327
8.1