10300 matches found
CVE-2018-18806
School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...
CVE-2018-18804
Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...
PT-2018-14667
Name of the Vulnerable Software and Affected Versions School Equipment Monitoring System version 1.0 Description The issue allows SQL injection via the login screen, related to include/user.vb. Recommendations For School Equipment Monitoring System version 1.0, consider restricting access to the...
PT-2018-14665
Name of the Vulnerable Software and Affected Versions Bakeshop Inventory System version 1.0 Description The issue is related to SQL injection via the login screen. It is connected to the include/publicfunction.vb file. Recommendations For Bakeshop Inventory System version 1.0, consider restrictin...
CVE-2018-18804: Improper Neutralization of Special Elements used in an SQL Command
Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb...
CVE-2018-18806: Improper Neutralization of Special Elements used in an SQL Command
School Equipment Monitoring System 1.0 allows SQL injection via the login screen, related to include/user.vb...
CVE-2018-18608: Improper Neutralization of Input During Web Page Generation
DedeCMS 5.7 SP2 allows XSS via the function named GetPageList defined in the include/datalistcp.class.php file that is used to display the page numbers list at the bottom of some templates, as demonstrated by the PATHINFO to /member/index.php, /member/pm.php, /member/contentlist.php, or...
GHSA-4XJH-M3QX-49WC Jekyll allows attackers to access arbitrary files by specifying a symlink
Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the include key in the config.yml file...
DEBIAN-CVE-2018-17567
Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in the "config.yml" file...
UBUNTU-CVE-2018-17567
Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in the "config.yml" file...
Jekyll Arbitrary File Access Vulnerability
Jekyll is a static website generator. A security vulnerability exists in Jekyll version 3.6.2 and earlier, version 3.7.x through 3.7.3, and version 3.8.x through 3.8.3. An attacker can exploit the vulnerability by specifying a symbolic link in the 'include' key of the 'config.yml' file to access...
CVE-2018-17567: Improper Link Resolution Before File Access
Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in the "config.yml" file...
Jekyll _config.yml privilege escalation
Jekyll through 3.6.2, 3.7.x through 3.7.3, and 3.8.x through 3.8.3 allows attackers to access arbitrary files by specifying a symlink in the "include" key in the "config.yml" file...
CVE-2018-16299
The Localize My Post plugin 1.0 for WordPress allows Directory Traversal via the ajax/include.php file parameter...
PT-2018-13973
Name of the Vulnerable Software and Affected Versions WAVM versions prior to 2018-09-16 Description An issue was discovered that allows attackers to cause a Denial of Service, resulting in an application crash due to an out-of-bounds read. This can be achieved by crafting a file with fewer than 4...
CVE-2018-17292: Out-of-bounds Read
An issue was discovered in WAVM before 2018-09-16. The loadModule function in Include/Inline/CLI.h lacks checking of the file length before a file magic comparison, allowing attackers to cause a Denial of Service application crash caused by out-of-bounds read by crafting a file that has fewer tha...
CVE-2018-16831
Smarty before 3.1.33-dev-4 allows attackers to bypass the trusteddir protection mechanism via a file:./../ substring in an include statement...
DEBIAN-CVE-2018-16831
Smarty before 3.1.33-dev-4 allows attackers to bypass the trusteddir protection mechanism via a file:./../ substring in an include statement...
