68525 matches found
CVE-2018-9121
In Crea8social 2018.2, there is Stored Cross-Site Scripting via a post comment...
CVE-2018-8654
An elevation of privilege vulnerability exists in Microsoft Dynamics 365 Server, aka 'Microsoft Dynamics 365 Elevation of Privilege Vulnerability'...
CVE-2018-5354
The custom GINA/CP module in ANIXIS Password Reset Client before version 3.22 allows remote attackers to execute code and escalate privileges via spoofing. When the client is configured to use HTTP, it does not authenticate the intended server before opening a browser window. An unauthenticated...
CVE-2018-8942
Xiuno BBS 4.0.0 has XSS in the adminpage sitename parameter...
CVE-2018-7652
lib/Zonemaster/GUI/Dancer/Export.pm in Zonemaster Web GUI before 1.0.11 has XSS...
CVE-2018-7651
index.js in the ssri module before 5.2.2 for Node.js is prone to a regular expression denial of service vulnerability in strict mode functionality via a long base64 hash string...
CVE-2018-7305
MyBB 1.8.14 is not checking for a valid CSRF token, leading to arbitrary deletion of user accounts...
CVE-2018-4268
A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to macOS High Sierra 10.13.6...
CVE-2018-8909
The Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside of the downloads directory via a ../ in a filename of a received file, related to AssetService.scala...
CVE-2018-5798
This CVE relates to an unspecified cross site scripting vulnerability in Cloudera Manager...
CVE-2018-8739
VPN Unlimited 4.2.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. The privileged helper tool implements an XPC interface, which allows arbitrary applications to execute system commands as root...
CVE-2018-5072
Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...
CVE-2018-7039
CCN-lite 2.0.0 Beta allows remote attackers to cause a denial of service buffer overflow or possibly have unspecified other impact because the ccnlndntlvprependBlob function in ccnl-pkt-ndntlv.c can be called with wrong arguments. Specifically, there is an incorrect integer data type causing a...
CVE-2019-20613
An issue was discovered on Samsung mobile devices with N7.x and O8.x software. There is time-based SQL injection in Contacts. The Samsung ID is SVE-2018-13452 March 2019...
CVE-2018-20059
jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE...
CVE-2018-19459
Adult Filter 1.0 has a Buffer Overflow via a crafted Black Domain List file...
CVE-2018-25001
An issue was discovered in the libpulse-binding crate before 2.5.0 for Rust. proplist::Iterator can cause a use-after-free...
CVE-2018-20917
cPanel before 70.0.23 allows any user to disable Solr SEC-371...
CVE-2018-4027
An exploitable denial-of-service vulnerability exists in the XMLUploadFile Wi-Fi command of the NT9665X Chipset firmware, running on the Anker Roav A1 Dashcam, version RoavA1SWV1.9. A specially crafted packet can cause a semaphore deadlock, which prevents the device from receiving any physical or...