6 matches found
CVE-2026-18474
The CVE-2026-18474 entry concerns the WP Directory Kit WordPress plugin prior to 1.5.6, where a parameter is not sanitised/escaped before being used in a SQL statement. This leads to unauthenticated SQL injection when a non-default search field type is configured, as described in the NVD/NIST rec...
CVE-2019-18474
This CVE-2019-18474 entry is rejected and not used.
CVE-2017-18474
cPanel before 62.0.4 allows arbitrary file-read operations via Exim valiases SEC-201...
CVE-2017-18474
CVE-2017-18474 affects cPanel before 62.0.4. The issue allows arbitrary file-read operations via Exim valiases, due to an improper handling path/resource filtering. Public descriptions consistently show impact as reading restricted files. Connected documents confirm the product/version and the un...
Microsoft Edge Spoofing Vulnerability (CNVD-2018-18474)
Microsoft Edge is a Web browser developed by the American company Microsoft Microsoft. A spoofing vulnerability exists in Microsoft Edge. The vulnerability stems from the program not properly parsing HTTP content. A remote attacker could exploit the vulnerability by leveraging a specially crafted...