|
247361
|
6.5 |
MEDIUM
Adjacent
|
technicolor
|
tc8305c_firmware
|
Technicolor (formerly RCA) TC8305C devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonstrated by macof. NOTE: this might over…
|
CWE-400
Uncontrolled Resource Consumption
|
CVE-2018-15907
|
2024-11-21 12:51 |
2018-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247362
|
5.5 |
MEDIUM
Local
|
qemu
|
qemu
|
qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service (guest crash) by leveraging mishandling of the seccomp policy for threads other than the main thread.
|
NVD-CWE-noinfo
|
CVE-2018-15746
|
2024-11-21 12:51 |
2018-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247363
|
6.1 |
MEDIUM
Network
|
isweb
|
isweb
|
CMS ISWEB 3.5.3 has XSS via the ordineRis, sezioneRicerca, or oggettiRicerca parameter to index.php.
|
CWE-79
Cross-site Scripting
|
CVE-2018-15562
|
2024-11-21 12:51 |
2018-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247364
|
9.8 |
CRITICAL
Network
|
grafana redhat
|
grafana ceph_storage
|
Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.
|
CWE-287
Improper Authentication
|
CVE-2018-15727
|
2024-11-21 12:51 |
2018-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247365
|
9.8 |
CRITICAL
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically prepared phar files to pass the upload filter.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2018-15882
|
2024-11-21 12:51 |
2018-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247366
|
7.5 |
HIGH
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.8.12. Inadequate checks regarding disabled fields can lead to an ACL violation.
|
NVD-CWE-noinfo
|
CVE-2018-15881
|
2024-11-21 12:51 |
2018-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247367
|
5.4 |
MEDIUM
Network
|
joomla
|
joomla\!
|
An issue was discovered in Joomla! before 3.8.12. Inadequate output filtering on the user profile page could lead to a stored XSS attack.
|
CWE-79
Cross-site Scripting
|
CVE-2018-15880
|
2024-11-21 12:51 |
2018-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247368
|
6.5 |
MEDIUM
Network
|
website_seller_script_project
|
website_seller_script
|
PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, Company Name, or Fax field, as demonstrated…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-15897
|
2024-11-21 12:51 |
2018-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247369
|
5.4 |
MEDIUM
Network
|
website_seller_script_project
|
website_seller_script
|
PHP Scripts Mall Website Seller Script 2.0.5 has XSS via Personal Address or Company Name.
|
CWE-79
Cross-site Scripting
|
CVE-2018-15896
|
2024-11-21 12:51 |
2018-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247370
|
8.8 |
HIGH
Network
|
e107
|
e107
|
e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators.
|
CWE-352
Origin Validation Error
|
CVE-2018-15901
|
2024-11-21 12:51 |
2018-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|