XWiki cross-site scripting vulnerability (CNVD-2018-20220)

XWiki is an open source wiki and application platform written in Java and released under the LGPL. A cross-site scripting vulnerability exists in the 'image:' function in XWiki 10.7 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary payloads or scripts from...

UBUNTU-CVE-2018-4312

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

UBUNTU-CVE-2018-4318

A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7...

CVE-2018-14813

Fuji Electric V-Server 4.0.3.0 and prior, A heap-based buffer overflow vulnerability has been identified, which may allow remote code execution...

CVE-2018-14809

Fuji Electric V-Server 4.0.3.0 and prior, A use after free vulnerability has been identified, which may allow remote code execution...

CVE-2018-8856

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The software contains hard-coded cryptographic key, which it uses for encryption of internal data...

CVE-2018-8844

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request...

CVE-2018-8854

Philips e-Alert Unit non-medical device, Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended...

Pdfalto Buffer Overflow Vulnerability

Pdfalto is a command-line tool for parsing PDF files and generate XML structured content in ALTO format. Pdfalto 0.2 and previous versions of the XmlAltoOutputDev.cc file of the 'TextPage::dump' function of the heap buffer overflow vulnerability, an attacker can be exploited to execute arbitrary...

CVE-2018-15960

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have a use of a component with a known vulnerability vulnerability. Successful exploitation could lead to arbitrary file overwrite...

Accusoft PrizmDoc Cross-Site Scripting Vulnerability

Accusoft PrizmDoc is a document management system from Accusoft Pegasus Imaging, USA. The system includes features such as document management, document viewing and document comparison. A cross-site scripting vulnerability exists in Accusoft PrizmDoc 13.3 and earlier versions. A remote attacker c...

Fuji Electric V-Server Buffer Overflow Vulnerability

Fuji Electric V-Server VPR is a data collection software from Fuji Electric Japan. A buffer overflow vulnerability in the stack exists in Fuji Electric V-Server VPR 4.0.3.0 and prior versions. A remote attacker could exploit this vulnerability to execute code...

Compatibility update for upgrading to Windows 10, version 1803: September 18, 2018

None None...

Fuji Electric V-Server Buffer Overflow Vulnerability

Fuji Electric V-Server VPR is a data collection software from Fuji Electric Japan. A heap buffer overflow vulnerability exists in Fuji Electric V-Server VPR 4.0.3.0 and earlier versions. A remote attacker could exploit this vulnerability to execute code...

Fuji Electric V-Server Lite Buffer Overflow Vulnerability

Fuji Electric V-Server Lite is a data collection software from Fuji Electric Japan. A buffer overflow vulnerability exists in Fuji Electric V-Server Lite 4.0.3.0 and earlier versions, which can be exploited to execute arbitrary code via a maliciously constructed project file...

LimeSurvey Path Traversal Vulnerability

LimeSurvey formerly known as PHPSurveyor is a set of open source online survey program developed by the LimeSurvey team, which supports survey program development, questionnaire distribution and data collection. A path traversal vulnerability exists in the file upload feature in LimeSurvey 3.14.4...

CVE-2018-0657

Cross-site scripting vulnerability in EC-CUBE Payment Module and GMO-PG Payment Module PG Multi-Payment Service for EC-CUBE EC-CUBE Payment Module 2.12 version 3.5.23 and earlier, EC-CUBE Payment Module 2.11 version 2.3.17 and earlier, GMO-PG Payment Module PG Multi-Payment Service 2.12 version...

PT-2018-13040 · Dokuwiki · Dokuwiki

Name of the Vulnerable Software and Affected Versions: DokuWiki versions 2018-04-22a and earlier Description: The issue allows remote attackers to exfiltrate sensitive data and to execute arbitrary code via a value that is mishandled in a CSV export in the /lib/plugins/usermanager/admin.php file...

CVE-2018-1353

An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with adom assignment read the interface settings of vdoms unrelated to the assigned adom...

Philips e-Alert Input Validation Vulnerability

Philips e-Alert is an electronic alert solution for MRI systems from Philips in the Netherlands, which is used to monitor and alert on MRI system performance. An input validation vulnerability exists in Philips e-Alert R2.1 and prior versions. An attacker could use this vulnerability to arbitrari...