8751 matches found
July 24, 2018âKB4338817 (OS Build 16299.579)
None None...
CVE-2018-14415
An issue was discovered in idreamsoft iCMS before 7.0.10. XSS exists via the fourth and fifth input elements on the admincp.php?app=prop&do=add screen...
KingCloud Antivirus v2.4.2.39 Personal Edition hookbody.sys driver has a denial of service vulnerability
KingCloud Antivirus is a next-generation artificial intelligence antivirus software for personal end devices launched by Tatsunobuilder. hookbody.sys is a kernel mode driver in KingCloud Personal Antivirus. A denial of service vulnerability exists in the hookbody.sys driver of KingCloud Antivirus...
PT-2018-9679
Name of the Vulnerable Software and Affected Versions: MicroWorld eScan Internet Security Suite ISS for Business version 14.0.1400.2029 Description: The issue allows a non-privileged user to cause a denial of service, resulting in a Blue Screen of Death BSOD, by sending a specific IOCTL request t...
Denial of Service Vulnerability in NSecKrnl32 Driver of Wei-Eye Computerized Supervisory System of Shandong Anzai Information Technology Co.
PowerEye Computer Supervision System is a professional company computer monitoring and LAN monitoring software. It monitors computer screens and also manages users' online behavior. The NSecKrnl32 driver of Shandong Anzai Information Technology Co., Ltd. has a denial of service vulnerability that...
Denial of Service Vulnerability in Destroyer Antivirus Software
Destroyer Antivirus, a security product of Destroyer Dalian Information Technology Co., Ltd, uses a self-developed super antivirus engine. A denial of service vulnerability exists in the SysGuard.sys driver of Destroyer Antivirus. An attacker can cause a blue screen by constructing a packet to se...
Security Advisory - DoS Vulnerability in Some Huawei Smart Phones
Some Huawei mobile phone versions have a denial of service DoS vulnerability because they do not adapt to specific screen gestures. An attacker may trick users into installing a malicious app. As a result, apps running on the frontend crash after the users make specific screen gestures...
Design/Logic Flaw
The Ultimate Member aka ultimatemember plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen...
CVE-2018-13136
The Ultimate Member aka ultimatemember plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen...
CVE-2018-13136
The Ultimate Member aka ultimatemember plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen...
CVE-2018-13136: Improper Neutralization of Input During Web Page Generation
The Ultimate Member aka ultimatemember plugin before 2.0.18 for WordPress has XSS via the wp-admin settings screen...
PT-2018-11625
Name of the Vulnerable Software and Affected Versions The Ultimate Member plugin versions prior to 2.0.18 Description The issue allows for XSS via the wp-admin settings screen. Recommendations For versions prior to 2.0.18, update to version 2.0.18 or later to resolve the issue...
CVE-2018-13122
onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to delete arbitrary files via the Delete Files screen, as demonstrated by a ?i=var/www/html/&f=123.php&p=edit&p=deletefile URI...
CVE-2018-13106
ClipperCMS 1.3.3 has stored XSS via the "Tools - Configuration" screen of the manager/ URI...
CVE-2018-13106
ClipperCMS 1.3.3 has stored XSS via the "Tools - Configuration" screen of the manager/ URI...
CVE-2018-13122: Incorrect Permission Assignment for Critical Resource
onefilecms.php in OneFileCMS through 2017-10-08 might allow attackers to delete arbitrary files via the Delete Files screen, as demonstrated by a ?i=var/www/html/&f=123.php&p=edit&p=deletefile URI...
CVE-2018-12994
onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the New File screen...
CVE-2018-12995
onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to execute arbitrary PHP code via a .php filename on the Upload screen...