| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-16329 | 7.5 | In ImageMagick before 7.0.8-8, a NULL pointer dereference exists in the GetMagickProperty function in MagickCore/property.c. | 2018-10-25 16:15:00 | 2018-09-01 22:29:00 |
| CVE-2018-16333 | 7.8 | An issue was discovered on Tenda AC7 V15.03.06.44_CN, AC9 V15.03.05.19(6318)_CN, AC10 V15.03.06.23_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. There is a buffer overflow vulnerability in the router's web server. While processing | 2018-10-25 15:40:00 | 2018-09-02 03:29:00 |
| CVE-2018-16334 | 9.0 | An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN and AC10 V15.03.06.23_CN devices. The mac parameter in a POST request is used directly in a doSystemCmd call, causing OS command injection. | 2018-10-25 15:17:00 | 2018-09-02 03:29:00 |
| CVE-2018-1000661 | 4.3 | jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmentation fault. This attack appear to be exploitable via the victim executing specially crafted javascr | 2018-10-25 15:03:00 | 2018-09-06 17:29:00 |
| CVE-2018-1000663 | 4.3 | jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function _jsi_evalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. | 2018-10-25 14:49:00 | 2018-09-06 17:29:00 |
| CVE-2018-1000655 | 4.3 | Jsish version 2.4.65 contains a CWE-476: NULL Pointer Dereference vulnerability in Function jsi_ValueCopyMove from jsiValue.c:240 that can result in Crash due to segmentation fault. This attack appear to be exploitable via a crafted javascript code. | 2018-10-25 14:38:00 | 2018-08-20 19:31:00 |
| CVE-2018-1000668 | 4.3 | jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c:274) that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted | 2018-10-25 14:37:00 | 2018-09-06 17:29:00 |
| CVE-2018-16353 | 7.5 | An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the /index.php/Customer/read limit parameter. | 2018-10-25 13:41:00 | 2018-09-02 22:29:00 |
| CVE-2018-16337 | 4.3 | An issue was discovered in Cscms V4.1.8. There is a CSRF vulnerability that can modify a website's basic configuration via upload/admin.php/setting/save. | 2018-10-25 13:40:00 | 2018-09-02 18:29:00 |
| CVE-2018-16315 | 4.3 | In waimai Super Cms 20150505, there is a CSRF vulnerability that can change the configuration via admin.php?m=Config&a=add. | 2018-10-25 13:40:00 | 2018-09-01 18:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: