|
248031
|
7.2 |
HIGH
Network
|
mybb
|
mybb
|
MyBB Group MyBB contains a File Inclusion vulnerability in Admin panel (Tools and Maintenance -> Task Manager -> Add New Task) that can result in Allows Local File Inclusion on modern PHP versions an…
|
CWE-829
Inclusion of Functionality from Untrusted Control Sphere
|
CVE-2018-1000502
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248032
|
9.8 |
CRITICAL
Network
|
instant-update
|
instant_update_cms
|
Instant Update CMS contains a Password Reset Vulnerability vulnerability in /iu-application/controllers/administration/auth.php that can result in Account Tackover. This attack appear to be exploitab…
|
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
|
CVE-2018-1000501
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248033
|
8.1 |
HIGH
Network
|
busybox
|
busybox
|
Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download …
|
CWE-295
Improper Certificate Validation
|
CVE-2018-1000500
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248034
|
9.8 |
CRITICAL
Network
|
xiongmaitech
|
uc-httpd
|
Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-10088
|
2024-11-21 12:40 |
2018-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248035
|
8.8 |
HIGH
Network
|
cgminer_project
bfgminer
|
cgminer
bfgminer
|
The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the addpool, failover-on…
|
CWE-787
Out-of-bounds Write
|
CVE-2018-10058
|
2024-11-21 12:40 |
2018-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248036
|
6.5 |
MEDIUM
Network
|
bfgminer
cgminer_project
|
bfgminer
cgminer
|
The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary locations on the server due to missing …
|
CWE-22
Path Traversal
|
CVE-2018-10057
|
2024-11-21 12:40 |
2018-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248037
|
5.5 |
MEDIUM
Local
|
kubernetes
|
kubernetes
|
In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary…
|
CWE-20
Improper Input Validation
|
CVE-2018-1002100
|
2024-11-21 12:40 |
2018-06-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248038
|
5.5 |
MEDIUM
Local
|
graphviz
fedoraproject
canonical
|
graphviz
fedora
ubuntu_linux
|
NULL pointer dereference vulnerability in the rebuild_vlists function in lib/dotgen/conc.c in the dotgen library in Graphviz 2.40.1 allows remote attackers to cause a denial of service (application c…
|
CWE-476
NULL Pointer Dereference
|
CVE-2018-10196
|
2024-11-21 12:40 |
2018-05-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248039
|
6.1 |
MEDIUM
Network
|
dolibarr
|
dolibarr
|
Cross-site scripting (XSS) vulnerability in Dolibarr before 7.0.2 allows remote attackers to inject arbitrary web script or HTML via the foruserlogin parameter to adherents/cartes/carte.php.
|
CWE-79
Cross-site Scripting
|
CVE-2018-10095
|
2024-11-21 12:40 |
2018-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248040
|
9.8 |
CRITICAL
Network
|
dolibarr
|
dolibarr
|
SQL injection vulnerability in Dolibarr before 7.0.2 allows remote attackers to execute arbitrary SQL commands via vectors involving integer parameters without quotes.
|
CWE-89
SQL Injection
|
CVE-2018-10094
|
2024-11-21 12:40 |
2018-05-23 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
