| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2016-8649 | 9.0 | lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls. | 2018-10-26 13:53:00 | 2017-05-01 06:59:00 |
| CVE-2018-10513 | 7.2 | A Deserialization of Untrusted Data Privilege Escalation vulnerability in Trend Micro Security 2018 (Consumer) products could allow a local attacker to escalate privileges on vulnerable installations. An attacker must first obtain the ability to exec | 2018-10-26 12:47:00 | 2018-08-30 19:29:00 |
| CVE-2018-15808 | 10.0 | POSIM EVO 15.13 for Windows includes hardcoded database credentials for the "root" database user. "root" access to POSIM EVO's database may result in a breach of confidentiality, integrity, or availability or allow for attackers to remotely execute c | 2018-10-26 12:18:00 | 2018-08-23 20:29:00 |
| CVE-2018-15605 | 4.3 | An issue was discovered in phpMyAdmin before 4.8.3. A Cross-Site Scripting vulnerability has been found where an attacker can use a crafted file to manipulate an authenticated user who loads that file through the import feature. | 2018-10-26 01:11:00 | 2018-08-24 19:29:00 |
| CVE-2018-16642 | 4.3 | The function InsertRow in coders/cut.c in ImageMagick 7.0.7-37 allows remote attackers to cause a denial of service via a crafted image file due to an out-of-bounds write. | 2018-10-25 19:02:00 | 2018-09-06 22:29:00 |
| CVE-2018-16410 | 4.0 | Vanilla before 2.6.1 allows SQL injection via an invitationID array to /profile/deleteInvitation, related to applications/dashboard/models/class.invitationmodel.php and applications/dashboard/controllers/class.profilecontroller.php. | 2018-10-25 18:00:00 | 2018-09-03 19:29:00 |
| CVE-2018-16330 | 4.3 | Pandao Editor.md 1.5.0 allows XSS via crafted attributes of an invalid IMG element. | 2018-10-25 17:48:00 | 2018-09-02 03:29:00 |
| CVE-2018-1353 | 4.0 | An information disclosure vulnerability in Fortinet FortiManager 6.0.1 and below versions allows a standard user with adom assignment read the interface settings of vdoms unrelated to the assigned adom. | 2018-10-25 17:09:00 | 2018-09-05 13:29:00 |
| CVE-2018-16416 | 6.8 | Cross-site request forgery (CSRF) vulnerability in my_profile/edit?inline= in FUEL CMS 1.4 allows remote attackers to change the administrator's password. | 2018-10-25 17:00:00 | 2018-09-03 19:29:00 |
| CVE-2018-16328 | 7.5 | In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the CheckEventLogging function in MagickCore/log.c. | 2018-10-25 16:23:00 | 2018-09-01 22:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: