|
247901
|
5.5 |
MEDIUM
Local
|
kde debian
|
okular debian_linux
|
okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result in Arbitrary file creation on the user wo…
|
CWE-22
Path Traversal
|
CVE-2018-1000801
|
2024-11-21 12:40 |
2018-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247902
|
6.1 |
MEDIUM
Network
|
sympa debian
|
sympa debian_linux
|
sympa version 6.2.16 and later contains a CWE-601: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in The "referer" parameter of the wwsympa.fcgi login action. that can result in Op…
|
CWE-601
Open Redirect
|
CVE-2018-1000671
|
2024-11-21 12:40 |
2018-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247903
|
9.8 |
CRITICAL
Network
|
zephyrproject
|
zephyr
|
zephyr-rtos version 1.12.0 contains a NULL base pointer reference vulnerability in sys_ring_buf_put(), sys_ring_buf_get() that can result in CPU Page Fault (error code 0x00000010). This attack appear…
|
CWE-476
NULL Pointer Dereference
|
CVE-2018-1000800
|
2024-11-21 12:40 |
2018-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247904
|
6.5 |
MEDIUM
Network
|
jsish
|
jsish
|
jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c:274) that can result in Crash due to segmentation fault. This attack appear to…
|
CWE-125
Out-of-bounds Read
|
CVE-2018-1000668
|
2024-11-21 12:40 |
2018-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247905
|
5.5 |
MEDIUM
Local
|
nasm
|
netwide_assembler
|
NASM nasm-2.13.03 nasm- 2.14rc15 version 2.14rc15 and earlier contains a memory corruption (crashed) of nasm when handling a crafted file due to function assemble_file(inname, depend_ptr) at asm/nasm…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-1000667
|
2024-11-21 12:40 |
2018-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247906
|
5.9 |
MEDIUM
Network
|
dsub_for_subsonic_project
|
dsub_for_subsonic
|
daneren2005 DSub for Subsonic (Android client) version 5.4.1 contains a CWE-295: Improper Certificate Validation vulnerability in HTTPS Client that can result in Any non-CA signed server certificate,…
|
CWE-295
Improper Certificate Validation
|
CVE-2018-1000664
|
2024-11-21 12:40 |
2018-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247907
|
9.8 |
CRITICAL
Network
|
openvcloud_project gig
|
openvcloud jumpscale
|
GIG Technology NV JumpScale Portal 7 version before commit 15443122ed2b1cbfd7bdefc048bf106f075becdb contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command I…
|
CWE-78
OS Command
|
CVE-2018-1000666
|
2024-11-21 12:40 |
2018-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247908
|
6.1 |
MEDIUM
Network
|
dojotoolkit
|
dojo
|
Dojo Dojo Objective Harness (DOH) version prior to version 1.14 contains a Cross Site Scripting (XSS) vulnerability in unit.html and testsDOH/_base/loader/i18n-exhaustive/i18n-test/unit.html and test…
|
CWE-79
Cross-site Scripting
|
CVE-2018-1000665
|
2024-11-21 12:40 |
2018-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247909
|
6.5 |
MEDIUM
Network
|
jsish
|
jsish
|
jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function _jsi_evalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable v…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-1000663
|
2024-11-21 12:40 |
2018-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247910
|
6.5 |
MEDIUM
Network
|
jsish
|
jsish
|
jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmentation fault. This attack appear to be exploitable…
|
CWE-476
NULL Pointer Dereference
|
CVE-2018-1000661
|
2024-11-21 12:40 |
2018-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|