CVE-2018-11189

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 1 of 6...

CVE-2018-11190

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 2 of 6...

CVE-2018-11154

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 12 of 46...

CVE-2018-11153

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 11 of 46...

WUZHI CMS SQL Injection Vulnerability

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A SQL injection vulnerability exists in WUZHI CMS version 4.1.0. A remote attacker can use api/smscheck.php?param= URI to execute arbitrary SQL commands...

CScms Cross-Site Request Forgery Vulnerability

CScms is a content management system CMS developed on a CI framework. A cross-site scripting vulnerability exists in the plugins/sys/admin/Sys.php file in CScms version 4.1. A remote attacker can exploit this vulnerability to change the administrator name and password with the help of the...

K2 smartforms server-side request forgery vulnerability

K2 smartforms is the United States K2 company's a browser-based smart form adding tools. A server-side request forgery vulnerability exists in the runtime application in K2 smartforms version 4.6.11. An attacker can exploit this vulnerability by modifying the hostname in the...

Square Enix Final Fantasy XIV for Windows Man-in-the-Middle Attack Vulnerability

Square Enix Final Fantasy XIV for Windows is a Japanese role-playing game based on the Windwos platform by Square Enix. Square Enix's Final Fantasy XIV for Windows is a role-playing game based on the Windwos platform. A security vulnerability exists in the ffxivlauncher.exe file in versions 4.21...

Pluck Remote PHP Code Execution Vulnerability

pluk is a simple content management system CMS written in PHP. A security vulnerability exists in versions prior to pluck 4.7.6. A remote attacker can exploit the vulnerability to execute PHP code...

Monxin Netcom Mall System v4.0 Exists Arbitrary File Upload Vulnerability

Monxin all-network mall system is a mall management system based on PC mall + cell phone mall + WeChat mall + offline cashier, members / orders / commodities / inventory online and offline real-time synchronization of data across the network. Monxin v4.0 there are arbitrary file upload...

IDM Denial of Service Vulnerability

NetIQ IDM also known as NetIQ Identity Manager is the United States NetIQ company's set of solutions to provide authentication and control access. Identity Applications is one of the authentication applications. Bi-directional driver is one of the two-way driver. A security vulnerability exists i...

Linux kernel 'etm_setup_aux' function denial-of-service vulnerability

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'etmsetupaux' function in the drivers/hwtracing/coresight/coresight-etm-perf.c file in versions of the Linux kernel prior to...

Linux kernel denial of service vulnerability (CNVD-2018-10796)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the 'dccpwritexmit' function in the net/dccp/output.c file in versions of Linux kernel prior to 4.16-rc7. A local attacker can explo...

PT-2018-5636 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A denial of service issue exists in the web server functionality. It can be triggered by a specially crafted HTTP URI, specifically a GET request to "/MOXA CFG.ini" without a cookie header,...

UBUNTU-CVE-2018-10963

The TIFFWriteDirectorySec function in tifdirwrite.c in LibTIFF through 4.0.9 allows remote attackers to cause a denial of service assertion failure and application crash via a crafted file, a different vulnerability than CVE-2017-13726...

DEBIAN-CVE-2018-10471

An issue was discovered in Xen through 4.10.x allowing x86 PV guest OS users to cause a denial of service out-of-bounds zero write and hypervisor crash via unexpected INT 80 processing, because of an incorrect fix for CVE-2017-5754...

Atlassian Fisheye and Crucible Cross-Site Scripting Vulnerabilities

Atlassian FishEye and Crucible are both products of the Australian company Atlassian, FishEye is a suite of software for deep viewing of source code repositories and Crucible is a suite of code review tools. A cross-site scripting vulnerability exists in the handling of response packet headers in...

WUZHI CMS Cross-Site Scripting Vulnerability (CNVD-2018-08585)

WUZHI CMS is China's five fingers WUZHI Internet technology company based on PHP and MySQL open source content management system CMS. A cross-site scripting vulnerability exists in the content management feature of WUZHI CMS version 4.1.0. A remote attacker can exploit this vulnerability to injec...

Google Android Security Bypass Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A security vulnerability exists in the Device Administrator code in versions prior to Android 4.4.1r1, which stems from the program's failure to update the mAdminMap data structur...

Contec Smart Home Unauthorized Password Reset Vulnerability

Contec Smart Home is a smart home management system for managing connected smart home devices. A security vulnerability exists in Contec Smart Home version 4.15, which stems from the program failing to require authentication for the newuser.php, edituser.php, deleteuser.php, and user.php files. A...