|
246731
|
9.8 |
CRITICAL
Network
|
intelbras
|
ncloud_300_firmware
|
An issue was discovered on Intelbras NCLOUD 300 1.0 devices. /cgi-bin/ExportSettings.sh, /goform/updateWPS, /goform/RebootSystem, and /goform/vpnBasicSettings do not require authentication. For examp…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2018-11094
|
2024-11-21 12:42 |
2018-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246732
|
6.5 |
MEDIUM
Network
|
e107
|
e107
|
e107 2.1.7 has CSRF resulting in arbitrary user deletion.
|
CWE-352
Origin Validation Error
|
CVE-2018-11127
|
2024-11-21 12:42 |
2018-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246733
|
8.8 |
HIGH
Network
|
doorgets
|
doorgets
|
dg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an administrator account.
|
CWE-352
Origin Validation Error
|
CVE-2018-11126
|
2024-11-21 12:42 |
2018-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246734
|
6.1 |
MEDIUM
Network
|
3cx
|
live_chat
|
There is stored cross site scripting in the wp-live-chat-support plugin before 8.0.08 for WordPress via the "name" (aka wplc_name) and "email" (aka wplc_email) input fields to wp-json/wp_live_chat_su…
|
CWE-79
Cross-site Scripting
|
CVE-2018-11105
|
2024-11-21 12:42 |
2018-05-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246735
|
5.3 |
MEDIUM
Adjacent
|
mimobaby
|
mimo_baby_2_firmware
|
Mimo Baby 2 devices do not use authentication or encryption for the Bluetooth Low Energy (BLE) communication from a Turtle to a Lilypad, which allows attackers to inject fake information about the po…
|
CWE-287 CWE-311
Improper Authentication Missing Encryption of Sensitive Data
|
CVE-2018-10825
|
2024-11-21 12:42 |
2018-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246736
|
7.5 |
HIGH
Network
|
libav
|
libav
|
An issue was discovered in Libav 12.3. A read access violation in the mov_probe function in libavformat/mov.c allows remote attackers to cause a denial of service (application crash), as demonstrated…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-11102
|
2024-11-21 12:42 |
2018-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246737
|
8.8 |
HIGH
Network
|
libming
|
libming
|
The decompileSETTARGET function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a …
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-11100
|
2024-11-21 12:42 |
2018-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246738
|
7.2 |
HIGH
Network
|
frog_cms_project
|
frog_cms
|
An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/file_manager/upload URI, a similar issue to CVE-2014-4912.
|
CWE-434
Unrestricted Upload of File with Dangerous Type
|
CVE-2018-11098
|
2024-11-21 12:42 |
2018-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246739
|
7.5 |
HIGH
Network
|
cstring_project
|
cstring
|
An issue was discovered in cloudwu/cstring through 2016-11-09. There is a memory leak vulnerability that could lead to a program crash.
|
CWE-772
Missing Release of Resource after Effective Lifetime
|
CVE-2018-11097
|
2024-11-21 12:42 |
2018-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246740
|
8.8 |
HIGH
Network
|
libming
|
libming
|
The decompileJUMP function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size greater than the actual size, which allows remote attackers to cause a denia…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-11095
|
2024-11-21 12:42 |
2018-05-15 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|