| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-6257 | 4.4 | NVIDIA GeForce Experience all versions prior to 3.14.1 contains a potential vulnerability when GameStream is enabled where improper access control may lead to a denial of service, escalation of privileges, or both. | 2020-08-24 17:37:00 | 2018-08-31 20:29:00 |
| CVE-2018-16275 | 6.8 | OPSWAT MetaDefender before v4.11.2 allows CSV injection. | 2020-08-24 17:37:00 | 2018-08-31 13:29:00 |
| CVE-2018-16157 | 5.0 | waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=cart&a=save item_totals parameter to zero, the entire cart is sold for free. | 2020-08-24 17:37:00 | 2018-08-30 13:29:00 |
| CVE-2018-16158 | 10.0 | Eaton Power Xpert Meter 4000, 6000, and 8000 devices before 13.4.0.10 have a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH l | 2020-08-24 17:37:00 | 2018-08-30 05:29:00 |
| CVE-2018-14768 | 9.0 | Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code. | 2020-08-24 17:37:00 | 2018-08-29 19:29:00 |
| CVE-2018-15884 | 6.8 | RICOH MP C4504ex devices allow HTML Injection via the /web/entry/en/address/adrsSetUserWizard.cgi entryNameIn parameter. | 2020-08-24 17:37:00 | 2018-08-28 19:29:00 |
| CVE-2018-15608 | 4.3 | Zoho ManageEngine ADManager Plus 6.5.7 allows HTML Injection on the "AD Delegation" "Help Desk Technicians" screen. | 2020-08-24 17:37:00 | 2018-08-28 19:29:00 |
| CVE-2018-14572 | 6.8 | In conference-scheduler-cli, a pickle.load call on imported data allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call. | 2020-08-24 17:37:00 | 2018-08-28 19:29:00 |
| CVE-2018-15571 | 6.8 | The Export Users to CSV plugin through 1.1.1 for WordPress allows CSV injection. | 2020-08-24 17:37:00 | 2018-08-28 17:29:00 |
| CVE-2018-15833 | 4.0 | In Vanilla before 2.6.1, the polling functionality allows Insecure Direct Object Reference (IDOR) via the Poll ID, leading to the ability of a single user to select multiple Poll Options (e.g., vote for multiple items). | 2020-08-24 17:37:00 | 2018-08-26 17:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: