| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-1000544 | 7.5 | rubyzip gem rubyzip version 1.2.1 and earlier contains a Directory Traversal vulnerability in Zip::File component that can result in write arbitrary files to the filesystem. This attack appear to be exploitable via If a site allows uploading of .zip | 2020-08-24 17:37:00 | 2018-06-26 16:29:00 |
| CVE-2018-1000527 | 6.5 | Froxlor version <= 0.9.39.5 contains a PHP Object Injection vulnerability in Domain name form that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Passing malicious PHP objection in $_ | 2020-08-24 17:37:00 | 2018-06-26 16:29:00 |
| CVE-2018-1000525 | 7.5 | openpsa contains a PHP Object Injection vulnerability in Form data passed as GET request variables that can result in Possible information disclosure and remote code execution. This attack appear to be exploitable via Specially crafted GET request va | 2020-08-24 17:37:00 | 2018-06-26 16:29:00 |
| CVE-2018-12889 | 7.5 | An issue was discovered in CCN-lite 2.0.1. There is a heap-based buffer overflow in mkAddToRelayCacheRequest and in ccnl_populate_cache for an array lacking '\0' termination when reading a binary CCNx or NDN file. This can result in Heap Corruption. | 2020-08-24 17:37:00 | 2018-06-26 13:29:00 |
| CVE-2018-12693 | 6.8 | Stack-based buffer overflow in TP-Link TL-WA850RE Wi-Fi Range Extender with hardware version 5 allows remote authenticated users to cause a denial of service (outage) via a long type parameter to /data/syslog.filter.json. | 2020-08-24 17:37:00 | 2018-06-23 21:29:00 |
| CVE-2018-12601 | 7.5 | There is a heap-based buffer overflow in ReadImage in input-tga.ci in sam2p 0.49.4 that leads to a denial of service or possibly unspecified other impact. | 2020-08-24 17:37:00 | 2018-06-20 18:29:00 |
| CVE-2018-12327 | 7.5 | Stack-based buffer overflow in ntpq and ntpdc of NTP version 4.2.8p11 allows an attacker to achieve code execution or escalate to higher privileges via a long string as the argument for an IPv4 or IPv6 command-line parameter. NOTE: It is unclear whet | 2020-08-24 17:37:00 | 2018-06-20 14:29:00 |
| CVE-2018-12293 | 6.8 | The getImageData function in the ImageBufferCairo class in WebCore/platform/graphics/cairo/ImageBufferCairo.cpp in WebKit, as used in WebKitGTK+ prior to version 2.20.3 and WPE WebKit prior to version 2.20.1, is vulnerable to a heap-based buffer over | 2020-08-24 17:37:00 | 2018-06-19 21:29:00 |
| CVE-2018-11726 | 6.8 | The mobi_decode_font_resource function in util.c in Libmobi 0.3 allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted mobi file. | 2020-08-24 17:37:00 | 2018-06-19 21:29:00 |
| CVE-2018-11526 | 6.8 | The plugin "WordPress Comments Import & Export" for WordPress (v2.0.4 and before) is vulnerable to CSV Injection. | 2020-08-24 17:37:00 | 2018-06-19 19:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: