58382 matches found
CVE-2018-10468
creationtimestamp| type| source ---|---|--- 2026-06-19 12:53:13+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/98b00839-0cf3-4fe8-88f0-dca753731094 2026-06-23 14:04:06+00:00| exploited|...
Security Bulletin: Security vulnerability has been identified in dojo library shipped with IBM Guardium Key Lifecycle Manager (SKLM/GKLM) (CVE-2018-1000665)
Summary Security vulnerability has been addressed in IBM Guardium Key Lifecycle Manager SKLM/GKLM Vulnerability Details CVEID:CVE-2018-1000665 DESCRIPTION: Dojo Dojo Objective Harness DOH version prior to version 1.14 contains a Cross Site Scripting XSS vulnerability in unit.html and...
CVE-2018-25432
creationtimestamp| type| source ---|---|--- 2026-06-01 23:41:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbaxvphnn27...
CVE-2018-25427
creationtimestamp| type| source ---|---|--- 2026-06-01 23:28:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnbaawxpqt2w 2026-06-02 09:13:23+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mncawkjpq62y...
CVE-2018-25433
Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malicious SQL code through the categoryid parameter. Attackers can send GET requests to index.php with crafted categoryid values in the...
CVE-2018-25406
creationtimestamp| type| source ---|---|--- 2026-05-30 19:07:10+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mn3qpkwenp2v...
CVE-2018-25421
creationtimestamp| type| source ---|---|--- 2026-05-30 17:58:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3mvgyviz2k...
CVE-2018-25418
creationtimestamp| type| source ---|---|--- 2026-05-30 17:53:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3mmikzbo2t...
CVE-2018-25423
creationtimestamp| type| source ---|---|--- 2026-05-30 17:48:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3mdk2xqu2a...
CVE-2018-25419
creationtimestamp| type| source ---|---|--- 2026-05-30 17:10:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3k7laaip2q...
CVE-2018-25424
creationtimestamp| type| source ---|---|--- 2026-05-30 17:09:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3k4eztdw2u...
CVE-2018-25417
AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the quality parameter. Attackers can send GET requests to quality.php with crafted SQL payloads in the quality parameter to extrac...
CVE-2018-25412
Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to docsupload.php with crafted multipart form data. Attackers can upload PHP files with arbitrary content to the upload directory and execute th...
CVE-2018-25423 Arm Whois 3.11 Denial of Service via Buffer Overflow
Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition...
CVE-2018-25422 MOGG web simulator Script All Version SQL Injection via play.php
MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through the id parameter. Attackers can send GET requests to play.php with crafted SQL payloads in the id parameter to extract...
CVE-2018-25412 Delta Sql 1.8.2 Arbitrary File Upload via docs_upload.php
Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to docsupload.php with crafted multipart form data. Attackers can upload PHP files with arbitrary content to the upload directory and execute th...
CVE-2018-25409
SIM-PKH 2.4.1 contains an Arbitrary File Upload vulnerability. Authenticated users can upload PHP code via the fupload parameter to the aksi_pengurus.php endpoint (module=pengurus, act=update). Uploaded PHP files are stored in the foto directory and can be executed as web scripts, enabling potent...
CVE-2018-25406
eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through parameters in mod.php. Attackers can inject SQL through the artid, cid, did, contid, and aboutid parameters across...
