7101 matches found
CVE-2018-10657
Matrix Synapse before 0.28.1 is prone to a denial of service flaw where malicious events injected with depth = 2^63 - 1 render rooms unusable, related to federation/federationbase.py and handlers/message.py, as exploited in the wild in April 2018...
CVE-2018-10504
creationtimestamp| type| source ---|---|--- 2018-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44559...
CVE-2018-4206
creationtimestamp| type| source ---|---|--- 2018-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44562...
CVE-2018-8735
creationtimestamp| type| source ---|---|--- 2018-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44560 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/nagiosxichainedrce.rb 2018-06-29 17:22:27+00:00| seen...
CVE-2018-4139
creationtimestamp| type| source ---|---|--- 2018-04-30 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44561...
CVE-2018-10468
The transferFrom function of a smart contract implementation for Useless Ethereum Token UET, an Ethereum ERC20 token, allows attackers to steal assets e.g., transfer all victims' balances into their account because certain computations involving value are incorrect, as exploited in the wild...
Drupal Core Critical RCE Vulnerability (SA-CORE-2018-004) - Linux
Drupal is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal"; if...
DRUPAL-CORE-2018-004
A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical -...
Integer overflow
An integer overflow in the transferProxy function of a smart contract implementation for SmartMesh aka SMT, an Ethereum ERC20 token, allows attackers to accomplish an unauthorized increase of digital assets via crafted fee and value parameters, as exploited in the wild in April 2018, aka the...
Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004
A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to Drupal core - Highly critical -...
drupal -- Drupal Core - Multiple Vulnerabilities
Drupal Security Team reports: A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to...
CVE-2018-4934
creationtimestamp| type| source ---|---|--- 2018-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44528 2025-08-31 03:01:26+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...
CVE-2018-4936
creationtimestamp| type| source ---|---|--- 2018-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44526 2025-08-31 03:01:24+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...
CVE-2018-4937
creationtimestamp| type| source ---|---|--- 2018-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44529 2025-08-31 03:01:27+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...
CVE-2018-4935
creationtimestamp| type| source ---|---|--- 2018-04-24 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44527 2025-08-31 03:01:24+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...
CVE-2018-9857
creationtimestamp| type| source ---|---|--- 2018-04-18 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44486...
CVE-2018-0968
creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44465...
CVE-2018-0969
creationtimestamp| type| source ---|---|--- 2018-04-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44459...