|
247931
|
6.1 |
MEDIUM
Network
|
villagedefrance
|
opencart-overclocked
|
OpenCart-Overclocked version <=1.11.1 contains a Cross Site Scripting (XSS) vulnerability in User input entered unsanitised within JS function in the template that can result in Unauthorised actions …
|
CWE-79
Cross-site Scripting
|
CVE-2018-1000640
|
2024-11-21 12:40 |
2018-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247932
|
9.6 |
CRITICAL
Network
|
latexdraw_project
|
latexdraw
|
LatexDraw version <=4.0 contains a XML External Entity (XXE) vulnerability in SVG parsing functionality that can result in disclosure of data, server side request forgery, port scanning, possible rce…
|
CWE-611
XXE
|
CVE-2018-1000639
|
2024-11-21 12:40 |
2018-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247933
|
6.1 |
MEDIUM
Network
|
1234n
|
minicms
|
MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.org/mc-admin/page.php?date={payload} that can result in code injection.
|
CWE-79
Cross-site Scripting
|
CVE-2018-1000638
|
2024-11-21 12:40 |
2018-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247934
|
7.8 |
HIGH
Local
|
nongnu debian
|
zutils debian_linux
|
zutils version prior to version 1.8-pre2 contains a Buffer Overflow vulnerability in zcat that can result in Potential denial of service or arbitrary code execution. This attack appear to be exploita…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-1000637
|
2024-11-21 12:40 |
2018-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247935
|
6.7 |
MEDIUM
Local
|
openmicroscopy
|
omero
|
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains a Information Exposure Through Sent Data vulnerability in OMERO.server that can result in an Attacker gaining full adminis…
|
CWE-200
Information Exposure
|
CVE-2018-1000635
|
2024-11-21 12:40 |
2018-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247936
|
7.2 |
HIGH
Network
|
openmicroscopy
|
omero
|
The Open Microscopy Environment OMERO.server version 5.4.0 to 5.4.6 contains an Improper Access Control vulnerability in User management that can result in administrative user with privilege restrict…
|
CWE-269
Improper Privilege Management
|
CVE-2018-1000634
|
2024-11-21 12:40 |
2018-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247937
|
6.5 |
MEDIUM
Network
|
jerryscript
|
jerryscript
|
JerryScript version Tested on commit f86d7459d195c8ba58479d1861b0cc726c8b3793. Analysing history it seems that the issue has been present since commit 64a340ffeb8809b2b66bbe32fd443a8b79fdd860 contain…
|
CWE-476
NULL Pointer Dereference
|
CVE-2018-1000636
|
2024-11-21 12:40 |
2018-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247938
|
7.2 |
HIGH
Network
|
openmicroscopy
|
omero
|
The Open Microscopy Environment OMERO.web version prior to 5.4.7 contains an Information Exposure Through Log Files vulnerability in the login form and change password form that can result in User's …
|
CWE-200
Information Exposure
|
CVE-2018-1000633
|
2024-11-21 12:40 |
2018-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247939
|
7.5 |
HIGH
Network
|
dom4j_project debian oracle redhat netapp
|
dom4j debian_linux flexcube_investor_servicing retail_integration_bus utilities_framework primavera_p6_enterprise_project_portfolio_management rapid_planning satellite_capsule
|
dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents th…
|
CWE-91
Blind XPath Injection
|
CVE-2018-1000632
|
2024-11-21 12:40 |
2018-08-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247940
|
4.3 |
MEDIUM
Network
|
paloaltonetworks
|
pan-os
|
The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to shut down all management sessions, resulting in all logged in users to be redirec…
|
CWE-20
Improper Input Validation
|
CVE-2018-10140
|
2024-11-21 12:40 |
2018-08-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|