| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-1784 | 7.5 | IBM API Connect 5.0.0.0 and 5.0.8.4 is affected by a NoSQL Injection in MongoDB connector for the LoopBack framework. IBM X-Force ID: 148807. | 2020-08-24 17:37:00 | 2018-12-20 14:29:00 |
| CVE-2018-1677 | 2.1 | IBM DataPower Gateways 7.1, 7.2, 7.5, 7.5.1, 7.5.2, 7.6, and 7.7 and IBM MQ Appliance are vulnerable to a denial of service, caused by the improper handling of full file system. A local attacker could exploit this vulnerability to cause a denial of s | 2020-08-24 17:37:00 | 2018-12-20 14:29:00 |
| CVE-2018-17195 | 5.1 | The template upload API endpoint accepted requests from different domain when sent in conjunction with ARP spoofing + man in the middle (MiTM) attack, resulting in a CSRF attack. The required attack vector is complex, requiring a scenario with client | 2020-08-24 17:37:00 | 2018-12-19 14:29:00 |
| CVE-2018-17192 | 4.3 | The X-Frame-Options headers were applied inconsistently on some HTTP responses, resulting in duplicate or missing security headers. Some browsers would interpret these results incorrectly, allowing clickjacking attacks. Mitigation: The fix to consist | 2020-08-24 17:37:00 | 2018-12-19 14:29:00 |
| CVE-2018-20230 | 6.8 | An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other | 2020-08-24 17:37:00 | 2018-12-19 11:29:00 |
| CVE-2018-1833 | 3.5 | IBM Event Streams 2018.3.0 could allow a remote attacker to submit an API request with a fake Host request header. An attacker, who has already gained authorised access via the CLI, could exploit this vulnerability to spoof the request header. IBM X- | 2020-08-24 17:37:00 | 2018-12-18 15:29:00 |
| CVE-2018-20184 | 4.3 | In GraphicsMagick 1.4 snapshot-20181209 Q8, there is a heap-based buffer overflow in the WriteTGAImage function of tga.c, which allows attackers to cause a denial of service via a crafted image file, because the number of rows or columns can exceed t | 2020-08-24 17:37:00 | 2018-12-17 19:29:00 |
| CVE-2018-16596 | 5.4 | A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box (2, Standard, and Plus) prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows remote code execution. No authentication is required t | 2020-08-24 17:37:00 | 2018-12-17 19:29:00 |
| CVE-2018-18250 | 5.0 | Icinga Web 2 before 2.6.2 allows parameters that break navigation dashlets, as demonstrated by a single '$' character as the Name of a Navigation item. | 2020-08-24 17:37:00 | 2018-12-17 15:29:00 |
| CVE-2018-20161 | 3.3 | A design flaw in the BlinkForHome (aka Blink For Home) Sync Module 2.10.4 and earlier allows attackers to disable cameras via Wi-Fi, because incident clips (triggered by the motion sensor) are not saved if the attacker's traffic (such as Dot11Deauth) | 2020-08-24 17:37:00 | 2018-12-15 06:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: