|
247911
|
8.8 |
HIGH
Network
|
vivotek
|
camera
|
VIVOTEK FD8177 devices before XXXXXX-VVTK-xx06a allow CSRF.
|
CWE-352
Origin Validation Error
|
CVE-2018-14769
|
2024-11-21 12:49 |
2018-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247912
|
9.8 |
CRITICAL
Network
|
haxx
canonical
debian
redhat
|
libcurl
ubuntu_linux
debian_linux
enterprise_linux
|
curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curl_ntlm_core_mk_nt_hash multiplies the length of the password by two (SUM) to fig…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2018-14618
|
2024-11-21 12:49 |
2018-09-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247913
|
5.9 |
MEDIUM
Network
|
redhat
|
wildfly
|
The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting al…
|
CWE-319
Cleartext Transmission of Sensitive Information
|
CVE-2018-14627
|
2024-11-21 12:49 |
2018-09-4 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247914
|
7.5 |
HIGH
Network
|
libtirpc_project
|
libtirpc
|
An infinite loop vulnerability was found in libtirpc before version 1.0.2-rc2. With the port to using poll rather than select, exhaustion of file descriptors would cause the server to enter an infini…
|
CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
|
CVE-2018-14621
|
2024-11-21 12:49 |
2018-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247915
|
7.5 |
HIGH
Network
|
redhat
debian
canonical
libtirpc_project
|
enterprise_linux
debian_linux
ubuntu_linux
enterprise_linux_server_aus
enterprise_linux_server_eus
enterprise_linux_workstation
enterprise_linux_desktop
libtirpc
|
A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the serve…
|
CWE-252
Unchecked Return Value
|
CVE-2018-14622
|
2024-11-21 12:49 |
2018-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247916
|
7.8 |
HIGH
Local
|
linux
|
linux_kernel
|
A flaw was found in the crypto subsystem of the Linux kernel before version kernel-4.15-rc4. The "null skcipher" was being dropped when each af_alg_ctx was freed instead of when the aead_tfm was free…
|
CWE-20
Improper Input Validation
|
CVE-2018-14619
|
2024-11-21 12:49 |
2018-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247917
|
8.8 |
HIGH
Network
|
vivotek
|
camera
|
Various VIVOTEK FD8*, FD9*, FE9*, IB8*, IB9*, IP9*, IZ9*, MS9*, SD9*, and other devices before XXXXXX-VVTK-xx06a allow remote attackers to execute arbitrary code.
|
NVD-CWE-noinfo
|
CVE-2018-14768
|
2024-11-21 12:49 |
2018-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247918
|
9.8 |
CRITICAL
Network
|
hitachienergy
|
esoms
|
ABB eSOMS version 6.0.2 may allow unauthorized access to the system when LDAP is set to allow anonymous authentication, and specific key values within the eSOMS web.config file are present. Both cond…
|
CWE-287
Improper Authentication
|
CVE-2018-14805
|
2024-11-21 12:49 |
2018-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247919
|
7.8 |
HIGH
Local
|
pyconuk
|
conference-scheduler-cli
|
In conference-scheduler-cli, a pickle.load call on imported data allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.syste…
|
CWE-78
CWE-502
OS Command
Deserialization of Untrusted Data
|
CVE-2018-14572
|
2024-11-21 12:49 |
2018-08-29 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247920
|
9.8 |
CRITICAL
Network
|
x.org
debian
canonical
|
libx11
debian_linux
ubuntu_linux
|
An issue was discovered in libX11 through 1.6.5. The function XListExtensions in ListExt.c interprets a variable as signed instead of unsigned, resulting in an out-of-bounds write (of up to 128 bytes…
|
CWE-787
Out-of-bounds Write
|
CVE-2018-14600
|
2024-11-21 12:49 |
2018-08-25 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
