| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-15699 | 4.3 | ASUSTOR Data Master 3.1.5 and below makes an HTTP request for a configuration file that is vulnerable to XSS. A man in the middle can take advantage of this by inserting Javascript into the configuration files Version field. | 2018-10-30 14:25:00 | 2018-08-27 14:29:00 |
| CVE-2018-15696 | 4.0 | ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi. | 2018-10-30 14:09:00 | 2018-08-27 14:29:00 |
| CVE-2018-15698 | 6.8 | ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on the file system when providing the full path to loginimage.cgi. | 2018-10-30 14:00:00 | 2018-08-27 14:29:00 |
| CVE-2018-15695 | 8.5 | ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to delete any file on the file system due to a path traversal vulnerability in wallpaper.cgi. | 2018-10-30 13:56:00 | 2018-08-27 14:29:00 |
| CVE-2018-0647 | 6.8 | Cross-site request forgery (CSRF) vulnerability in WL-330NUL Firmware version prior to 3.0.0.46 allows remote attackers to hijack the authentication of administrators via unspecified vectors. | 2018-10-30 13:31:00 | 2018-09-07 14:29:00 |
| CVE-2018-18655 | 4.3 | Prayer through 1.3.5 sends a Referer header, containing a user's username, when a user clicks on a link in their email because header.t lacks a no-referrer setting. | 2018-10-30 13:14:00 | 2018-10-26 00:29:00 |
| CVE-2018-0659 | 5.8 | Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create or overwrite existing files via specially crafted ATC file. | 2018-10-30 12:32:00 | 2018-09-07 14:29:00 |
| CVE-2018-0660 | 4.3 | Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create arbitrary files via specially crafted ATC file. | 2018-10-30 12:19:00 | 2018-09-07 14:29:00 |
| CVE-2017-18216 | 2.1 | In fs/ocfs2/cluster/nodemanager.c in the Linux kernel before 4.15, local users can cause a denial of service (NULL pointer dereference and BUG) because a required mutex is not used. | 2018-10-30 10:29:00 | 2018-03-05 18:29:00 |
| CVE-2017-15595 | 7.2 | An issue was discovered in Xen through 4.9.x allowing x86 PV guest OS users to cause a denial of service (unbounded recursion, stack consumption, and hypervisor crash) or possibly gain privileges via crafted page-table stacking. | 2018-10-30 10:29:00 | 2017-10-18 08:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: