67755 matches found
CVE-2018-4450
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS Mojave 10.14.2...
CVE-2018-14919
LOYTEC LGATE-902 6.3.2 devices allow XSS...
CVE-2018-20956
Swann SWWHD-INTCAM-HD devices leave the PSK in logs after a factory reset. NOTE: all affected customers were migrated by 2020-08-31...
CVE-2018-20990
An issue was discovered in the tar crate before 0.4.16 for Rust. Arbitrary file overwrite can occur via a symlink or hardlink in a TAR archive...
CVE-2018-10422
An issue was discovered in HongCMS 3.0.0. The post news feature has Stored XSS via the content field...
CVE-2018-20862
cPanel before 76.0.8 unsafely performs PostgreSQL password changes SEC-366...
CVE-2018-20613
TEMMOKU T1.09 Beta allows admin/user/add CSRF...
CVE-2018-10048
iScripts eSwap v2.4 has CSRF via "registrationsettings.php" in the Admin Panel...
CVE-2018-11596
Espruino before 1.99 allows attackers to cause a denial of service application crash with a user crafted input file via a Buffer Overflow during syntax parsing because a check for '\0' is made for the wrong array element in jsvar.c...
CVE-2018-17243
Global Search in Zoho ManageEngine OpManager before 12.3 123205 allows SQL Injection...
CVE-2018-11226
The getString function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denial of service Segmentation fault and application crash or possibly have unspecified other impact...
CVE-2018-5215
Fork CMS 5.0.7 has XSS in /private/en/pages/edit via the title parameter...
CVE-2018-17006
An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for firewall lanmanage mac2...
CVE-2018-19613
Westermo DR-250 Pre-5162 and DR-260 Pre-5162 routers allow CSRF...
CVE-2018-5078
Online Ticket Booking has XSS via the admin/eventlist.php cast parameter...
CVE-2018-5493
ATTO FibreBridge 7500N firmware versions prior to 2.90 are susceptible to a vulnerability which allows an unauthenticated remote attacker to cause Denial of Service DoS...
CVE-2018-21255
An issue was discovered in Mattermost Server before 5.1. Non-members of a channel could use the Channel PATCH API to modify that channel...
CVE-2018-16217
The network diagnostic function ping in the Yeahlink Ultra-elegant IP Phone SIP-T41P firmware 66.83.0.35 allows a remote authenticated attacker to trigger OS commands or open a reverse shell via command injection...