|
246441
|
8.1 |
HIGH
Network
|
teamviewer
|
teamviewer
|
TeamViewer through 13.1.1548 stores a password in Unicode format within TeamViewer.exe process memory between "[00 88] and "[00 00 00]" delimiters, which might make it easier for attackers to obtain …
|
CWE-200
Information Exposure
|
CVE-2018-14333
|
2024-11-21 12:48 |
2018-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246442
|
8.8 |
HIGH
Network
|
xiaocms
|
xiaocms_x1
|
An issue was discovered in XiaoCms X1 v20140305. There is a CSRF vulnerability to change the administrator account password via admin/index.php?c=index&a=my.
|
CWE-352
Origin Validation Error
|
CVE-2018-14331
|
2024-11-21 12:48 |
2018-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246443
|
4.7 |
MEDIUM
Local
|
htslib
|
htslib
|
In HTSlib 1.8, a race condition in cram/cram_io.c might allow local users to overwrite arbitrary files via a symlink attack.
|
CWE-362 CWE-59
Race Condition Link Following
|
CVE-2018-14329
|
2024-11-21 12:48 |
2018-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246444
|
4.8 |
MEDIUM
Network
|
techotronic
|
all_in_one_favicon
|
Multiple Persistent cross-site scripting (XSS) issues in the Techotronic all-in-one-favicon (aka All In One Favicon) plugin 4.6 for WordPress allow remote attackers to inject arbitrary web script or …
|
CWE-79
Cross-site Scripting
|
CVE-2018-13832
|
2024-11-21 12:48 |
2018-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246445
|
8.8 |
HIGH
Network
|
techsmith
|
mp4v2
|
In MP4v2 2.0.0, there is an integer overflow (with resultant memory corruption) when resizing MP4Array for the ftyp atom in mp4array.h.
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2018-14326
|
2024-11-21 12:48 |
2018-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246446
|
8.8 |
HIGH
Network
|
techsmith
|
mp4v2
|
In MP4v2 2.0.0, there is an integer underflow (with resultant memory corruption) when parsing MP4Atom in mp4atom.cpp.
|
CWE-191
Integer Underflow (Wrap or Wraparound)
|
CVE-2018-14325
|
2024-11-21 12:48 |
2018-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246447
|
9.8 |
CRITICAL
Network
|
oracle
|
glassfish_server
|
The demo feature in Oracle GlassFish Open Source Edition 5.0 has TCP port 7676 open by default with a password of admin for the admin account. This allows remote attackers to obtain potentially sensi…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2018-14324
|
2024-11-21 12:48 |
2018-07-17 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246448
|
9.8 |
CRITICAL
Network
|
zeta-producer
|
zeta_producer_desktop_cms
|
The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated remote code execution due to a default component that permits arbitrary upload of PHP files…
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2018-13981
|
2024-11-21 12:48 |
2018-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246449
|
5.5 |
MEDIUM
Local
|
zeta-producer
|
zeta_producer
|
The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated file disclosure if the plugin "filebrowser" is installed, because of assets/php/filebrowser…
|
CWE-22
Path Traversal
|
CVE-2018-13980
|
2024-11-21 12:48 |
2018-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246450
|
9.8 |
CRITICAL
Network
|
cyberhobo
|
geo_mashup
|
The Geo Mashup plugin before 1.10.4 for WordPress has insufficient sanitization of post editor and other user input.
|
CWE-20
Improper Input Validation
|
CVE-2018-14071
|
2024-11-21 12:48 |
2018-07-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|