| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-18955 | 4.4 | In the Linux kernel 4.15.x through 4.19.x before 4.19.2, map_write() in kernel/user_namespace.c allows privilege escalation because it mishandles nested user namespaces with more than 5 UID or GID ranges. A user who has CAP_SYS_ADMIN in an affected u | 2020-08-24 17:37:00 | 2018-11-16 20:29:00 |
| CVE-2018-7359 | 7.5 | All versions up to V1.1.10P3T18 of ZTE ZXHN F670 product are impacted by heap-based buffer overflow vulnerability, which may allow an attacker to execute arbitrary code. | 2020-08-24 17:37:00 | 2018-11-16 15:29:00 |
| CVE-2018-9086 | 6.5 | In some Lenovo ThinkServer-branded servers, a command injection vulnerability exists in the BMC firmware download command. This allows a privileged user to download and execute arbitrary code inside the BMC. This can only be exploited by authorized p | 2020-08-24 17:37:00 | 2018-11-16 14:29:00 |
| CVE-2018-16620 | 5.0 | Sonatype Nexus Repository Manager before 3.14 has Incorrect Access Control. | 2020-08-24 17:37:00 | 2018-11-15 20:29:00 |
| CVE-2018-16163 | 5.5 | OpenDolphin 2.7.0 and earlier allows authenticated attackers to bypass authentication to create and/or delete other users accounts via unspecified vectors. | 2020-08-24 17:37:00 | 2018-11-15 15:29:00 |
| CVE-2018-19289 | 4.3 | An issue was discovered in Valine v1.3.3. It allows HTML injection, which can be exploited for JavaScript execution via an EMBED element in conjunction with a .pdf file. | 2020-08-24 17:37:00 | 2018-11-15 06:29:00 |
| CVE-2018-9525 | 7.2 | In the AndroidManifest.xml file defining the SliceBroadcastReceiver handler for com.android.settings.slice.action.WIFI_CHANGED, there is a possible permissions bypass due to a confused deputy. This could lead to local escalation of privilege, allowin | 2020-08-24 17:37:00 | 2018-11-14 18:29:00 |
| CVE-2018-9457 | 2.1 | In onCheckedChanged of BluetoothPairingController.java, there is a possible way to retrieve contact information due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interact | 2020-08-24 17:37:00 | 2018-11-14 18:29:00 |
| CVE-2018-12174 | 4.6 | Heap overflow in Intel Trace Analyzer 2018 in Intel Parallel Studio XE 2018 Update 3 may allow an authenticated user to potentially escalate privileges via local access. | 2020-08-24 17:37:00 | 2018-11-14 14:29:00 |
| CVE-2018-8609 | 6.5 | A remote code execution vulnerability exists in Microsoft Dynamics 365 (on-premises) version 8 when the server fails to properly sanitize web requests to an affected Dynamics server, aka "Microsoft Dynamics 365 (on-premises) version 8 Remote Code Exe | 2020-08-24 17:37:00 | 2018-11-14 01:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: