| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-16644 | 4.3 | There is a missing check for length in the functions ReadDCMImage of coders/dcm.c and ReadPICTImage of coders/pict.c in ImageMagick 7.0.8-11, which allows remote attackers to cause a denial of service via a crafted image. | 2020-08-24 17:37:00 | 2018-09-06 22:29:00 |
| CVE-2018-16606 | 4.0 | In ProConf before 6.1, an Insecure Direct Object Reference (IDOR) allows any author to view and grab all submitted papers (Title and Abstract) and their authors' personal information (Name, Email, Organization, and Position) by changing the value of | 2020-08-24 17:37:00 | 2018-09-06 16:29:00 |
| CVE-2018-1695 | 6.8 | IBM WebSphere Application Server 7.0, 8.0, and 8.5.5 installations using Form Login could allow a remote attacker to conduct spoofing attacks. IBM X-Force ID: 145769. | 2020-08-24 17:37:00 | 2018-09-06 14:29:00 |
| CVE-2018-15677 | 4.3 | The newsfeed (aka /index.php?page=viewnews) in BTITeam XBTIT 2.5.4 has stored XSS via the title of a news item. This is also exploitable via CSRF. | 2020-08-24 17:37:00 | 2018-09-05 21:29:00 |
| CVE-2018-14771 | 9.0 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 2 of 2) via eventscript.cgi. | 2020-08-24 17:37:00 | 2018-09-05 21:29:00 |
| CVE-2018-14770 | 9.0 | VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code (issue 1 of 2) via the ONVIF interface, (/onvif/device_service). | 2020-08-24 17:37:00 | 2018-09-05 21:29:00 |
| CVE-2018-16367 | 9.0 | In OnlineJudge 2.0, the sandbox has an incorrect access control vulnerability that can write a file anywhere. A user can write a directory listing to /tmp, and can leak file data with a #include. | 2020-08-24 17:37:00 | 2018-09-02 22:29:00 |
| CVE-2018-16335 | 6.8 | newoffsets handling in ChopUpSingleUncompressedStrip in tif_dirread.c in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted TIF | 2020-08-24 17:37:00 | 2018-09-02 03:29:00 |
| CVE-2018-16308 | 6.8 | The Ninja Forms plugin before 3.3.14.1 for WordPress allows CSV injection. | 2020-08-24 17:37:00 | 2018-09-01 18:29:00 |
| CVE-2018-6258 | 1.9 | NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability during GameStream installation where an attacker who has system access can potentially conduct a Man-in-the-Middle (MitM) attack to obtain sensitive information | 2020-08-24 17:37:00 | 2018-08-31 20:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: