CVE-2018-4328

creationtimestamp| type| source ---|---|--- 2018-09-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45483...

CVE-2018-17380

creationtimestamp| type| source ---|---|--- 2018-09-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45477...

CVE-2018-4314

creationtimestamp| type| source ---|---|--- 2018-09-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45480...

CVE-2018-17173

creationtimestamp| type| source ---|---|--- 2018-09-24 12:42:26+00:00| published-proof-of-concept| https://t.me/VulnerabilityNews/1796 2019-12-17 14:15:43+00:00| seen| MISP/5df8e293-8fe4-4dc0-a0c4-4c3502de0b81 2020-01-08 13:22:45+00:00| seen| MISP/5e15d698-a3b4-40fd-86e7-15cc02de0b81 2020-10-09...

CVE-2018-16071

creationtimestamp| type| source ---|---|--- 2018-09-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45443 2018-09-22 11:12:17+00:00| published-proof-of-concept| https://t.me/VulnerabilityNews/1775...

CVE-2018-16083

creationtimestamp| type| source ---|---|--- 2018-09-21 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45444 2018-09-22 11:12:24+00:00| seen| https://t.me/VulnerabilityNews/1776...

Cross site request forgery (csrf)

A potential Cross-Site Request Forgery CSRF vulnerability has been identified in ArcSight Management Center ArcMC in all versions prior to 2.81. This vulnerability could be exploited to allow for Cross-Site Request Forgery CSRF...

CVE-2018-8449

creationtimestamp| type| source ---|---|--- 2018-09-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45435...

CVE-2018-8410

creationtimestamp| type| source ---|---|--- 2018-09-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45436 2018-09-19 13:34:17+00:00| seen| https://t.me/canyoupwnme/4411...

CVE-2018-8355

creationtimestamp| type| source ---|---|--- 2018-09-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45432...

CVE-2018-8384

creationtimestamp| type| source ---|---|--- 2018-09-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45431...

Old WordPress Plugin Being Exploited in RCE Attacks

Researchers are warning that attackers are abusing a vulnerability in WordPress site admins’ outdated versions of a migration plugin called Duplicator – allowing them to execute remote code. Made by Snap Creek Software, all Duplicator plugins earlier than version 1.2.42 are vulnerable to the...

CVE-2018-17254

creationtimestamp| type| source ---|---|--- 2018-09-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45423 2024-11-14 06:08:15+00:00| seen| MISP/d314eb11-81e9-4d90-b43a-b17c0d47f952 2025-09-17 21:02:34+00:00| seen|...

CVE-2019-9766

creationtimestamp| type| source ---|---|--- 2018-09-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45403...

CVE-2018-1756

creationtimestamp| type| source ---|---|--- 2018-09-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45392...

Apache Struts 2.x < 2.3.15.1 Multiple Vulnerabilities (S2-016) (S2-017)

The version of Apache Struts running on the remote host is 2.x prior to 2.3.15.1. It, therefore, is affected by multiple vulnerabilities including a remote command execution vulnerability and an open redirect vulnerability. Note that Nessus has not tested for these issues but has instead relied...

CVE-2018-16509

creationtimestamp| type| source ---|---|--- 2018-09-06 02:15:08+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/fileformat/ghostscriptfailedrestore.rb 2018-09-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45369 2023-12-04...

CVE-2018-15918

creationtimestamp| type| source ---|---|--- 2018-09-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45340...

KLA11313 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR

Multiple serious vulnerabilities were found in Mozilla Firefox and Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An use after free vulnerabili...

Cisco Identity Services Engine Struts2 Namespace Vulnerability

According to its self-reported version, the Cisco Identity Services Engine Software is affected by a struts2 namespace vulnerability. Please see the included Cisco BID and the Cisco Security Advisory for more information. TRUSTED...