Svi - CERT CVE

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2018-16430 6.8 GNU Libextractor through 1.7 has an out-of-bounds read vulnerability in EXTRACTOR_zip_extract_method() in zip_extractor.c. 2018-10-25 12:17:00
CVE-2018-16348 3.5 SeaCMS V6.61 has XSS via the admin_video.php v_content parameter, related to the site name. 2018-10-25 12:08:00
CVE-2018-16347 4.3 An issue was discovered in Gleez CMS v1.2.0. There is XSS via media/imagecache/resize. 2018-10-25 12:05:00
CVE-2018-16339 6.8 An issue was discovered in EmpireCMS 7.0. There is a CSRF vulnerability that can add administrators via upload/e/admin/user/AddUser.php?enews=AddUser. 2018-10-25 11:58:00
CVE-2018-16338 6.8 An issue was discovered in AuraCMS 2.3. There is a CSRF vulnerability that can change the administrator's password via admin.php?mod=users and subsequently add a page or menu, or submit a topic. 2018-10-25 11:55:00
CVE-2018-16342 3.5 ShowDoc v1.8.0 has XSS via a new page. 2018-10-25 02:25:00
CVE-2018-16361 4.3 An issue was discovered in BTITeam XBTIT 2.5.4. news.php allows XSS via the id parameter. 2018-10-25 02:18:00
CVE-2018-16354 7.5 An issue was discovered in FHCRM through 2018-02-11. There is a SQL injection via the index.php/User/read limit parameter. 2018-10-25 02:03:00
CVE-2018-16373 4.0 Frog CMS 0.9.5 has an Upload vulnerability that can create files via /admin/?/plugin/file_manager/save. 2018-10-25 01:53:00
CVE-2018-16372 4.3 The issue was discovered in IdeaCMS through 2016-04-30. There is reflected XSS via the index.php?c=content&a=search kw parameter. NOTE: this product is discontinued. 2018-10-25 01:38:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/39518
Zapisa po stranici: