| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-1999-1137 | 2.1 | The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone. | 2018-10-30 16:25:00 | 1993-10-01 04:00:00 |
| CVE-2018-15870 | 4.3 | An invalid memory address dereference was discovered in decompileGETVARIABLE in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. | 2018-10-30 15:56:00 | 2018-08-25 19:29:00 |
| CVE-2018-15871 | 4.3 | An invalid memory address dereference was discovered in decompileSingleArgBuiltInFunctionCall in libming 0.4.8 before 2018-03-12. The vulnerability causes a segmentation fault and application crash, which leads to denial of service. | 2018-10-30 15:55:00 | 2018-08-25 19:29:00 |
| CVE-2018-9283 | 3.5 | An XSS issue was discovered in CremeCRM 1.6.12. It is affected by 10 stored Cross-Site Scripting (XSS) vulnerabilities in the firstname, lastname, billing_address-address, billing_address-zipcode, billing_address-city, billing_address-department, shi | 2018-10-30 15:50:00 | 2018-09-07 22:29:00 |
| CVE-2018-16731 | 7.5 | CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then providing a .php pathname within fileurl JSON data. | 2018-10-30 15:26:00 | 2018-09-08 15:29:00 |
| CVE-2014-4932 | 4.3 | Cross-site scripting (XSS) vulnerability in the Wordfence Security plugin before 5.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the val parameter to whois.php. | 2018-10-30 15:16:00 | 2018-08-28 17:29:00 |
| CVE-2018-12826 | 5.0 | Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. | 2018-10-30 14:59:00 | 2018-08-29 13:29:00 |
| CVE-2018-12827 | 5.0 | Adobe Flash Player 30.0.0.134 and earlier have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure. | 2018-10-30 14:54:00 | 2018-08-29 13:29:00 |
| CVE-2018-15694 | 6.0 | ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to upload files to arbitrary locations due to a path traversal vulnerability. This could lead to code execution if the "Web Server" feature is enabled. | 2018-10-30 14:50:00 | 2018-08-27 14:29:00 |
| CVE-2018-15697 | 4.0 | ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on a share by providing the full path. For example, /home/admin/.ash_history. | 2018-10-30 14:27:00 | 2018-08-27 14:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: