|
247121
|
6.5 |
MEDIUM
Network
|
tooltipy
|
tooltipy
|
Tooltipy (tooltips for WP) version 5 contains a Cross ite Request Forgery (CSRF) vulnerability in Settings page that can result in could allow anybody to duplicate posts. This attack appear to be exp…
|
CWE-352
Origin Validation Error
|
CVE-2018-1000505
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247122
|
7.2 |
HIGH
Network
|
redirection
|
redirection
|
Redirection version 2.7.3 contains a ACE via file inclusion vulnerability in Pass-through mode that can result in allows admins to execute any PHP file in the filesystem. This attack appear to be exp…
|
CWE-601
Open Redirect
|
CVE-2018-1000504
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247123
|
4.3 |
MEDIUM
Network
|
mybb
|
mybb
|
MyBB Group MyBB contains a Incorrect Access Control vulnerability in Private forums that can result in Users can view posts from private forums without having the password. This attack appear to be e…
|
CWE-269
Improper Privilege Management
|
CVE-2018-1000503
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247124
|
7.2 |
HIGH
Network
|
mybb
|
mybb
|
MyBB Group MyBB contains a File Inclusion vulnerability in Admin panel (Tools and Maintenance -> Task Manager -> Add New Task) that can result in Allows Local File Inclusion on modern PHP versions an…
|
CWE-829
Inclusion of Functionality from Untrusted Control Sphere
|
CVE-2018-1000502
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247125
|
9.8 |
CRITICAL
Network
|
instant-update
|
instant_update_cms
|
Instant Update CMS contains a Password Reset Vulnerability vulnerability in /iu-application/controllers/administration/auth.php that can result in Account Tackover. This attack appear to be exploitab…
|
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
|
CVE-2018-1000501
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247126
|
8.1 |
HIGH
Network
|
busybox
|
busybox
|
Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download …
|
CWE-295
Improper Certificate Validation
|
CVE-2018-1000500
|
2024-11-21 12:40 |
2018-06-27 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247127
|
9.8 |
CRITICAL
Network
|
xiongmaitech
|
uc-httpd
|
Buffer overflow in XiongMai uc-httpd 1.0.0 has unspecified impact and attack vectors, a different vulnerability than CVE-2017-16725.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-10088
|
2024-11-21 12:40 |
2018-06-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247128
|
8.8 |
HIGH
Network
|
cgminer_project bfgminer
|
cgminer bfgminer
|
The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the addpool, failover-on…
|
CWE-787
Out-of-bounds Write
|
CVE-2018-10058
|
2024-11-21 12:40 |
2018-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247129
|
6.5 |
MEDIUM
Network
|
bfgminer cgminer_project
|
bfgminer cgminer
|
The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary locations on the server due to missing …
|
CWE-22
Path Traversal
|
CVE-2018-10057
|
2024-11-21 12:40 |
2018-06-6 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247130
|
5.5 |
MEDIUM
Local
|
kubernetes
|
kubernetes
|
In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary…
|
CWE-20
Improper Input Validation
|
CVE-2018-1002100
|
2024-11-21 12:40 |
2018-06-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|