CVE-2018-13358

System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "checkName" parameter...

CVE-2018-7361

All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by null pointer dereference vulnerability, which may allows an attacker to cause a denial of service via appviahttp service...

CVE-2018-8524

creationtimestamp| type| source ---|---|--- 2018-11-14 17:39:01+00:00| seen| MISP/5bec5b59-b2b0-4506-9c63-32a40a021402...

Microsoft Dynamics 365 Cross-Site Scripting Vulnerability (CNVD-2018-23146)

Dynamics 365 is a product family of enterprise resource planning and customer relationship management applications released in July 2016 by Microsoft. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises version 8. The vulnerability stems from the software failing to...

CVE-2018-2482

SAP Mobile Secure Android Application, Mobile-secure.apk Android client, before version 6.60.19942.0, allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. Install the Mobile Secure Android client released in Mid-Oct 2018...

SQL injection vulnerability in the V***.php file of Yunyu CMS enterprise website management system (CNVD-2018-24728)

YUNUCMS enterprise website management system YUNUCMS is a set of professional marketing enterprise building system based on PHP + MYSQL as the core development. SQL injection vulnerability exists in the V.php file of YUNUCMS enterprise website management system. An attacker can exploit the...

UBUNTU-CVE-2018-18655

Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer setting...

CVE-2018-18599

Stegdetect through 2018-05-26 has an out-of-bounds write in f5compress in the f5.c file...

UBUNTU-CVE-2018-3173

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2018-15945

Adobe Acrobat and Reader versions 2018.011.20063 and earlier, 2017.011.30102 and earlier, and 2015.006.30452 and earlier have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code execution...

pcsoft21.com XSS vulnerability

Open Bug Bounty ID: OBB-684142 Description| Value ---|--- Affected Website:| pcsoft21.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unt...

CVE-2018-1593

IBM Multi-Cloud Data Encryption MDE 2.1 could allow an unauthorized user to manipulate data due to missing file checksums. IBM X-Force ID: 143568...

tcpreplay heap buffer overflow vulnerability (CNVD-2018-20537)

Tcpreplay is a set of open source utilities for editing and replaying network traffic for UNIX based operating systems. A heap buffer overflow vulnerability exists in the sendpackets.c file in Tcpreplay version 4.3.0, which stems from the 'getnextpacket' function using the 'memcpy' function in an...

WebKit memory corruption vulnerability in multiple Apple products (CNVD-2018-24561)

Apple iOS is an operating system developed for mobile devices; Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems. iTunes for Windows is a media player and application for the Windows platform. WebKit is one of the web browser engine components...

BELL-CVE-2018-14621 CVE-2018-14621 does not affect BellSoft software

Bulletin has no description...

CVE-2018-15120

creationtimestamp| type| source ---|---|--- 2018-08-28 09:26:25+00:00| published-proof-of-concept| https://t.me/VulnerabilityNews/1094...

Microsoft Windows LNK Remote Code Execution Vulnerability (CNVD-2018-16833)

Microsoft Windows is a series of operating systems released by the American company Microsoft. A remote code execution vulnerability exists in Microsoft Windows. A remote attacker could exploit this vulnerability to execute arbitrary code...

stagingcancer.com XSS vulnerability

Open Bug Bounty ID: OBB-662430 Description| Value ---|--- Affected Website:| stagingcancer.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Google Android System Remote Code Execution Vulnerability (CNVD-2018-18771)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in System in Android. A remote attacker can exploit this vulnerability to execute code...

Google Android System Remote Code Execution Vulnerability (CNVD-2018-18772)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in System in Android. A remote attacker can exploit this vulnerability to execute code...