UBUNTU-CVE-2026-18702

An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potentially obscuring...

CVE-2017-18702

NETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings...

CVE-2020-18702

Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...

CVE-2020-18702

Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...

CVE-2020-18702

Cross Site Scripting XSS in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the 'Username' parameter in the component 'quokka/admin/actions.py'...

CVE-2020-18702

The CVE-2020-18702 entry concerns a Cross Site Scripting (XSS) vulnerability in Quokka v0.4.0. Affected element is the quokka/admin/actions.py component, where the Username parameter can be exploited to execute arbitrary code on the remote attacker’s side. The collected connected documents consis...

CVE-2017-18702

creationtimestamp| type| source ---|---|--- 2020-04-24 19:37:06+00:00| seen| https://t.me/cibsecurity/11642...

CVE-2017-18702

NETGEAR R6220 devices running firmware older than 1.1.0.60 are affected by incorrect configuration of security settings. Root cause: misconfigured security settings. Impact: partial confidentiality and partial integrity impact; availability unaffected. Remediation: update to firmware 1.1.0.60 or ...

CVE-2019-18702

CVE-2019-18702 is rejected/not used and does not represent an active vulnerability.

CVE-2019-18702

...

CVE-2018-18702

spider.admincp.php in iCMS v7.0.11 allows SQL injection via admincp.php?app=spider&do=importrule because the upfile content is base64 decoded, deserialized, and used for database insertion...

CVE-2018-18702

spider.admincp.php in iCMS v7.0.11 allows SQL injection via admincp.php?app=spider&do=importrule because the upfile content is base64 decoded, deserialized, and used for database insertion...

CVE-2018-18702

The CVE applies to iCMS v7.0.11, where spider.admincp.php is vulnerable to SQL injection via admincp.php?app=spider&do=import_rule. The vulnerability arises because upfile content is base64 decoded, deserialized, and used to form a database insertion, allowing for injected SQL. CVSS shows high se...