Lucene search
+L

27 matches found

OSV
OSV
added 2018/06/05 12:29 p.m.17 views

CVE-2018-11722

WUZHI CMS 4.1.0 has a SQL Injection in api/uc.php via the 'code' parameter, because 'UCKEY' is hard coded...

9.8CVSS10AI score
SaveExploits0References1
CVE
CVE
added 2018/06/05 12:00 p.m.47 views

CVE-2018-11722

CVE-2018-11722 affects WUZHI CMS 4.1.0 with a SQL Injection in api/uc.php driven by the 'code' parameter due to a hard-coded UC_KEY. The vulnerability is described across multiple datasources as enabling arbitrary SQL commands; CVSS metrics indicate network-level access, low attack complexity, an...

9.8CVSS9.8AI score0.01537EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2018/02/16 12:00 a.m.55 views

openSUSE Security Update : GraphicsMagick (openSUSE-2018-166)

This update for GraphicsMagick fixes the following issues : - The dcm coder was updated to newest code, covering all currently known security issues. Security issues fixed : - CVE-2017-17502: ReadCMYKImage in ImportCMYKQuantumType had a heap-based buffer over-read via a crafted file. boo1073081 -...

8.8CVSS7AI score0.04018EPSS
SaveExploits1References14
OSV
OSV
added 2017/07/28 1:29 p.m.11 views

CVE-2017-11722

The WriteOnePNGImage function in coders/png.c in GraphicsMagick 1.3.26 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted file, because the program's actual control flow was inconsistent with its indentation. This resulted in a logging...

6.5CVSS8.9AI score
SaveExploits0References4
CVE
CVE
added 2017/07/28 1:00 p.m.122 views

CVE-2017-11722

CVE-2017-11722 affects GraphicsMagick 1.3.26 and is caused by a control-flow discrepancy in the WriteOnePNGImage function (coders/png.c). A crafted PNG can trigger an out-of-bounds read, leading to an application crash and denial of service. The vulnerability stems from a logging statement execut...

6.5CVSS6.3AI score0.01807EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2016/11/29 12:00 a.m.11 views

w3m arbitrary code execution vulnerability (CNVD-2016-11722)

w3m is an open source text-based Web browser . A security vulnerability exists in versions of w3m prior to 0.5.3-31. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service...

8.8CVSS7.6AI score0.02866EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2009/09/24 12:00 a.m.32 views

SuSE9 Security Update : vim and gvim (YOU Patch Number 11722)

This update of Vim addresses a format-string bug in 'helptags'. This bug can be exploited to execute code with the privileges of the user running Vim. CVE-2007-2953 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

6.8CVSS8.5AI score0.04179EPSS
SaveExploits1References2
Rows per page
Query Builder