| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-18942 | 6.5 | In baserCMS before 4.1.4, lib\Baser\Model\ThemeConfig.php allows remote attackers to execute arbitrary PHP code via the admin/theme_configs/form data[ThemeConfig][logo] parameter. | 2020-08-24 17:37:00 | 2018-11-05 09:29:00 |
| CVE-2018-18924 | 6.5 | The image-upload feature in ProjeQtOr 7.2.5 allows remote attackers to execute arbitrary code by uploading a .shtml file with "#exec cmd" because rejected files remain on the server, with predictable filenames, after a "This file is not a valid image | 2020-08-24 17:37:00 | 2018-11-04 06:29:00 |
| CVE-2018-6909 | 4.3 | A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application could be used by a remote attacker for clickjacking, as demonstrated by triggering an API page request. | 2020-08-24 17:37:00 | 2018-11-01 17:29:00 |
| CVE-2018-6011 | 6.8 | The time-based one-time-password (TOTP) function in the application logic of the Green Electronics RainMachine Mini-8 (2nd generation) uses the administrator's password hash to generate a 6-digit temporary passcode that can be used for remote and loc | 2020-08-24 17:37:00 | 2018-11-01 17:29:00 |
| CVE-2018-18714 | 7.2 | RegFilter.sys in IOBit Malware Fighter 6.2 and earlier is susceptible to a stack-based buffer overflow when an attacker uses IOCTL 0x8006E010. This can lead to denial of service (DoS) or code execution with root privileges. | 2020-08-24 17:37:00 | 2018-11-01 17:29:00 |
| CVE-2018-18281 | 4.6 | Since Linux kernel version 3.2, the mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain f | 2020-08-24 17:37:00 | 2018-10-30 18:29:00 |
| CVE-2018-18834 | 7.5 | An issue has been found in libIEC61850 v1.3. It is a heap-based buffer overflow in BerEncoder_encodeOctetString in mms/asn1/ber_encoder.c. | 2020-08-24 17:37:00 | 2018-10-30 06:29:00 |
| CVE-2018-18828 | 4.3 | There exists a heap-based buffer overflow in vc1_decode_i_block_adv in vc1_block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file. | 2020-08-24 17:37:00 | 2018-10-30 06:29:00 |
| CVE-2018-18826 | 4.3 | There exists a heap-based buffer overflow in vc1_decode_p_mb_intfi in vc1_block.c in Libav 12.3, which allows attackers to cause a denial-of-service via a crafted aac file. | 2020-08-24 17:37:00 | 2018-10-30 06:29:00 |
| CVE-2018-18817 | 5.0 | The Leostream Agent before Build 7.0.1.0 when used with Leostream Connection Broker 8.2.72 or earlier allows remote attackers to modify registry keys via the Leostream Agent API. | 2020-08-24 17:37:00 | 2018-10-30 01:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: