|
248051
|
6.5 |
MEDIUM
Network
|
libtiff
|
libtiff
|
ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.
|
CWE-476
NULL Pointer Dereference
|
CVE-2018-10126
|
2024-11-21 12:40 |
2018-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248052
|
6.5 |
MEDIUM
Network
|
digitalguardian
|
management_console
|
Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue.
|
CWE-22
Path Traversal
|
CVE-2018-10176
|
2024-11-21 12:40 |
2018-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248053
|
6.5 |
MEDIUM
Network
|
digitalguardian
|
management_console
|
Digital Guardian Management Console 7.1.2.0015 has an XXE issue.
|
CWE-611
XXE
|
CVE-2018-10175
|
2024-11-21 12:40 |
2018-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248054
|
6.5 |
MEDIUM
Network
|
digitalguardian
|
management_console
|
Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. Thi…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2018-10174
|
2024-11-21 12:40 |
2018-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248055
|
8.8 |
HIGH
Network
|
digitalguardian
|
management_console
|
Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2018-10173
|
2024-11-21 12:40 |
2018-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248056
|
7.8 |
HIGH
Local
|
vertiv
|
watchdog_console
|
Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating (1) config.xml or (2) servers.xml.
|
CWE-269
Improper Privilege Management
|
CVE-2018-10079
|
2024-11-21 12:40 |
2018-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248057
|
4.8 |
MEDIUM
Network
|
vertiv
|
watchdog_console
|
Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a server description.
|
CWE-79
Cross-site Scripting
|
CVE-2018-10078
|
2024-11-21 12:40 |
2018-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248058
|
4.9 |
MEDIUM
Network
|
vertiv
|
watchdog_console
|
XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data.
|
CWE-611
XXE
|
CVE-2018-10077
|
2024-11-21 12:40 |
2018-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248059
|
8.8 |
HIGH
Network
|
phpmyadmin
|
phpmyadmin
|
phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db_operations.js, js/tbl_operations.js, libraries/classes/Operations.php, and sql.php.
|
CWE-352
Origin Validation Error
|
CVE-2018-10188
|
2024-11-21 12:40 |
2018-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248060
|
4.8 |
MEDIUM
Network
|
d-link
|
dir-615_t1_firmware
|
D-Link DIR-615 T1 devices allow XSS via the Add User feature.
|
CWE-79
Cross-site Scripting
|
CVE-2018-10110
|
2024-11-21 12:40 |
2018-04-19 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|