| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2018-16358 | 3.5 | A cross-site scripting (XSS) vulnerability in inc/core/class.dc.core.php in the media manager in Dotclear through 2.14.1 allows remote authenticated users to upload HTML content containing an XSS payload with the file extension .ahtml. | 2018-10-24 15:17:00 | 2018-09-02 22:29:00 |
| CVE-2018-16371 | 4.3 | PESCMS Team 2.2.1 has multiple reflected XSS via the keyword parameter: g=Team&m=User&a=index&keyword=, g=Team&m=User_group&a=index&keyword=, g=Team&m=Department&a=index&keyword=, and g=Team&m=Bulletin&a=index&keyword=. | 2018-10-24 14:39:00 | 2018-09-03 00:29:00 |
| CVE-2018-16374 | 3.5 | Frog CMS 0.9.5 has stored XSS via /admin/?/plugin/comment/settings. | 2018-10-24 14:36:00 | 2018-09-03 00:29:00 |
| CVE-2018-2912 | 5.0 | Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager). Supported versions that are affected are 12.1.2.1.0, 12.2.0.2.0 and 12.3.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo | 2018-10-24 13:27:00 | 2018-10-17 01:31:00 |
| CVE-2018-2914 | 5.0 | Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager). Supported versions that are affected are 12.1.2.1.0, 12.2.0.2.0 and 12.3.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo | 2018-10-24 13:20:00 | 2018-10-17 01:31:00 |
| CVE-2016-4793 | 5.0 | The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header. | 2018-10-23 21:29:00 | 2017-01-23 21:59:00 |
| CVE-2012-2104 | 6.8 | cgi-bin/munin-cgi-graph in Munin 2.x writes data to a log file without sanitizing non-printable characters, which might allow user-assisted remote attackers to inject terminal emulator escape sequences and execute arbitrary commands or delete arbitra | 2018-10-23 21:29:00 | 2012-08-26 21:55:00 |
| CVE-2018-16278 | 7.5 | phpkaiyuancms PhpOpenSourceCMS (POSCMS) V3.2.0 allows an unauthenticated user to execute arbitrary SQL commands via the diy/module/member/controllers/Api.php ajax_save_draft function with the dir parameter. | 2018-10-23 20:17:00 | 2018-08-31 16:29:00 |
| CVE-2018-16331 | 6.8 | admin.php?s=/Admin/doedit in DamiCMS v6.0.0 allows CSRF to change the administrator account's password. | 2018-10-23 19:57:00 | 2018-09-02 03:29:00 |
| CVE-2018-16350 | 4.3 | WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic form[statcode] parameter. | 2018-10-23 19:55:00 | 2018-09-02 18:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/39518
Zapisa po stranici: