67755 matches found
CVE-2018-20945
bin/csvprocess in cPanel before 68.0.27 allows insecure file operations SEC-354...
CVE-2018-21086
An issue was discovered on Samsung mobile devices with L5.x, M6.0, and N7.x software. There is a race condition with a resultant double free in vnswapinitbackingstorage. The Samsung ID is SVE-2017-11177 February 2018...
CVE-2018-11008
An Incorrect Access Control issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53...
CVE-2018-21016
audiosampleentryAddBox at isomedia/boxcodebase.c in GPAC 0.7.1 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted file...
CVE-2018-20979
The contact-form-7 plugin before 5.0.4 for WordPress has privilege escalation because of capabilitytype mishandling in registerposttype...
CVE-2018-7654
On 3CX 15.5.6354.2 devices, the parameter "file" in the request "/api/RecordingList/download?file=" allows full access to files on the server via path traversal...
CVE-2018-20837
include/admin/Menu/Ajax.php in Typesetter 5.1 has index.php/Admin/Menu/Ajax?cmd=AddHidden title XSS...
CVE-2018-20603
Lei Feng TV CMS aka LFCMS 3.8.6 allows admin.php?s=/Member/add.html CSRF...
CVE-2018-20503
Allied Telesis 8100L/8 devices allow XSS via the edit-ipv4interface.php vlanid or subnetmask parameter...
CVE-2018-17792
MDaemon Webmail formerly WorldClient has CSRF...
CVE-2018-17768
Ingenico Telium 2 POS terminals have an insecure TRACE protocol. This is fixed in Telium 2 SDK v9.32.03 patch N...
CVE-2018-8873
In 2345 Security Guard 3.6, the driver file 2345NetFirewall.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x00222040...
CVE-2018-7826
A Command Injection vulnerability exists in the web-based GUI of the 1st Gen Pelco Sarix Enhanced Camera that could allow a remote attacker to execute arbitrary commands...
CVE-2018-17611
Foxit PhantomPDF and Reader before 9.3 allow remote attackers to execute arbitrary code or cause a denial of service use-after-free because properties of Annotation objects are mishandled. This relates to one of five distinct types of Annotation objects...
CVE-2018-11423
There is Memory corruption in the web interface Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior, different vulnerability than CVE-2018-11420...
CVE-2018-20965
The ultimate-member plugin before 2.0.4 for WordPress has XSS...
CVE-2018-20849
Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATHINFO to the login/ URI...
CVE-2018-20553
Tcpreplay before 4.3.1 has a heap-based buffer over-read in getl2len in common/get.c...