|
247931
|
7.5 |
HIGH
Network
|
tp-link
|
eap_controller
|
The web application backup file in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows is encrypted with a hard-coded cryptographic key, so anyone who knows that key …
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2018-10167
|
2024-11-21 12:40 |
2018-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247932
|
8.8 |
HIGH
Network
|
tp-link
|
eap_controller
|
The web management interface in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows does not have Anti-CSRF tokens in any forms. This would allow an attacker to submi…
|
CWE-352
Origin Validation Error
|
CVE-2018-10166
|
2024-11-21 12:40 |
2018-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247933
|
5.4 |
MEDIUM
Network
|
tp-link
|
eap_controller
|
Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated attackers to inject arbitrary web script o…
|
CWE-79
Cross-site Scripting
|
CVE-2018-10165
|
2024-11-21 12:40 |
2018-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247934
|
5.4 |
MEDIUM
Network
|
tp-link
|
eap_controller
|
Stored Cross-site scripting (XSS) vulnerability in the TP-Link EAP Controller and Omada Controller versions 2.5.4_Windows/2.6.0_Windows allows authenticated attackers to inject arbitrary web script o…
|
CWE-79
Cross-site Scripting
|
CVE-2018-10164
|
2024-11-21 12:40 |
2018-05-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247935
|
7.8 |
HIGH
Local
|
7-zip
|
7-zip
|
Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service (segmentation fault) …
|
CWE-665 CWE-908
Improper Initialization Use of Uninitialized Resource
|
CVE-2018-10115
|
2024-11-21 12:40 |
2018-05-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247936
|
6.5 |
MEDIUM
Network
|
libtiff
|
libtiff
|
ijg-libjpeg before 9d, as used in tiff2pdf (from LibTIFF) and other products, does not check for a NULL pointer at a certain place in jpeg_fdct_16x16 in jfdctint.c.
|
CWE-476
NULL Pointer Dereference
|
CVE-2018-10126
|
2024-11-21 12:40 |
2018-04-22 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247937
|
6.5 |
MEDIUM
Network
|
digitalguardian
|
management_console
|
Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue.
|
CWE-22
Path Traversal
|
CVE-2018-10176
|
2024-11-21 12:40 |
2018-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247938
|
6.5 |
MEDIUM
Network
|
digitalguardian
|
management_console
|
Digital Guardian Management Console 7.1.2.0015 has an XXE issue.
|
CWE-611
XXE
|
CVE-2018-10175
|
2024-11-21 12:40 |
2018-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247939
|
6.5 |
MEDIUM
Network
|
digitalguardian
|
management_console
|
Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. Thi…
|
CWE-918
Server-Side Request Forgery (SSRF)
|
CVE-2018-10174
|
2024-11-21 12:40 |
2018-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247940
|
8.8 |
HIGH
Network
|
digitalguardian
|
management_console
|
Digital Guardian Management Console 7.1.2.0015 allows authenticated remote code execution because of Arbitrary File Upload functionality.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2018-10173
|
2024-11-21 12:40 |
2018-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|