| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-15576 | 6.8 | An issue was discovered in EasyLogin Pro through 1.3.0. Encryptor.php contains an unserialize call that can be exploited for remote code execution in the decrypt function, if the attacker knows the key. | 2020-08-24 17:37:00 | 2018-08-24 21:29:00 |
| CVE-2018-15809 | 2.1 | AccuPOS 2017.8 is installed with the insecure "Authenticated Users: Modify" permission for files within the installation path. This may allow local attackers to compromise the integrity of critical resource and executable files. | 2020-08-24 17:37:00 | 2018-08-23 20:29:00 |
| CVE-2018-1158 | 4.0 | Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server via recursive parsing of JSON. | 2020-08-24 17:37:00 | 2018-08-23 19:29:00 |
| CVE-2018-1156 | 9.0 | Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface. This vulnerability could theoretically allow a remote authenticated attacker execute arbitrary code on the system. | 2020-08-24 17:37:00 | 2018-08-23 19:29:00 |
| CVE-2018-5235 | 4.4 | Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Dependi | 2020-08-24 17:37:00 | 2018-08-22 17:29:00 |
| CVE-2018-15667 | 5.0 | An issue was discovered in Bloop Airmail 3 3.5.9 for macOS. It registers and uses the airmail:// URL scheme. The "send" command in the URL scheme allows an external application to send arbitrary emails from an active account without authentication. T | 2020-08-24 17:37:00 | 2018-08-21 23:29:00 |
| CVE-2018-14077 | 5.0 | Wi2be SMART HP WMT R1.2.20_201400922 allows unauthorized remote attackers to backup the device configuration via a direct request to /Maintenance/configfile.cfg. | 2020-08-24 17:37:00 | 2018-08-20 20:29:00 |
| CVE-2018-1000224 | 5.0 | Godot Engine version All versions prior to 2.1.5, all 3.0 versions prior to 3.0.6. contains a Signed/unsigned comparison, wrong buffer size chackes, integer overflow, missing padding initialization vulnerability in (De)Serialization functions (core/i | 2020-08-24 17:37:00 | 2018-08-20 20:29:00 |
| CVE-2018-1000641 | 7.5 | YesWiki version <= cercopitheque beta 1 contains a PHP Object Injection vulnerability in Unserialising user entered parameter in i18n.inc.php that can result in execution of code, disclosure of information. | 2020-08-24 17:37:00 | 2018-08-20 19:31:00 |
| CVE-2018-15494 | 7.5 | In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid. | 2020-08-24 17:37:00 | 2018-08-18 02:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: