|
247461
|
6.1 |
MEDIUM
Network
|
siemens
|
teamcenter_product_lifecycle_management
|
A reflected Cross-Site-Scripting (XSS) vulnerability has been identified in Siemens PLM Software TEAMCENTER (V9.1.2.5). If a user visits the login portal through the URL crafted by the attacker, the …
|
CWE-79
Cross-site Scripting
|
CVE-2018-11450
|
2024-11-21 12:43 |
2018-07-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247462
|
7.5 |
HIGH
Network
|
ribboncommunications
|
sonus_sbc_1000_firmware sonus_sbc_2000_firmware sbc_swe_lite_firmware
|
A Local File Inclusion (LFI) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the downloading of arbitrary files via an unspecified vector. It affects the 1000 a…
|
CWE-22
Path Traversal
|
CVE-2018-11543
|
2024-11-21 12:43 |
2018-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247463
|
9.8 |
CRITICAL
Network
|
ribboncommunications
|
sonus_sbc_1000_firmware sonus_sbc_2000_firmware sbc_swe_lite_firmware
|
A Remote Command Execution (RCE) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the execution of arbitrary commands via an unspecified vector. It affects the 1…
|
NVD-CWE-noinfo
|
CVE-2018-11542
|
2024-11-21 12:43 |
2018-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247464
|
9.8 |
CRITICAL
Network
|
ribboncommunications
|
sonus_sbc_1000_firmware sonus_sbc_2000_firmware sbc_swe_lite_web
|
A root privilege escalation vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows unauthorised access to privileged content via an unspecified vector. It affects the 1000…
|
CWE-862
Missing Authorization
|
CVE-2018-11541
|
2024-11-21 12:43 |
2018-07-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247465
|
6.1 |
MEDIUM
Network
|
jirafeau
|
jirafeau
|
script.php in Jirafeau before 3.4.1 is affected by two stored Cross-Site Scripting (XSS) vulnerabilities. These are stored within the shared files description file and allow the execution of a JavaSc…
|
CWE-79
Cross-site Scripting
|
CVE-2018-11351
|
2024-11-21 12:43 |
2018-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247466
|
6.1 |
MEDIUM
Network
|
jirafeau
|
jirafeau
|
An issue was discovered in Jirafeau before 3.4.1. The file "search by name" form is affected by one Cross-Site Scripting vulnerability via the name parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2018-11350
|
2024-11-21 12:43 |
2018-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247467
|
8.8 |
HIGH
Network
|
jirafeau
|
jirafeau
|
The administration panel of Jirafeau before 3.4.1 is vulnerable to three CSRF attacks on search functionalities: search_by_name, search_by_hash, and search_link.
|
CWE-352
Origin Validation Error
|
CVE-2018-11349
|
2024-11-21 12:43 |
2018-07-8 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247468
|
7.8 |
HIGH
Local
|
google
|
android
|
Possible buffer overflow in msm_adsp_stream_callback_put due to lack of input validation of user-provided data that leads to integer overflow in all Android releases(Android for MSM, Firefox OS for M…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2018-11304
|
2024-11-21 12:43 |
2018-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247469
|
7.7 |
HIGH
Local
|
qualcomm
|
mdm9206_firmware mdm9607_firmware mdm9635m_firmware mdm9640_firmware mdm9650_firmware mdm9655_firmware msm8909w_firmware msm8996au_firmware sd_210_firmware sd_212_firmware<…
|
Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2018-11259
|
2024-11-21 12:43 |
2018-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247470
|
7.8 |
HIGH
Local
|
qualcomm
|
sd_210_firmware sd_212_firmware sd_205_firmware sd_845_firmware sd_850_firmware
|
Permissions, Privileges, and Access Controls in TA in Snapdragon Mobile has an options that allows RPMB erase for secure devices in versions SD 210/SD 212/SD 205, SD 845, SD 850.
|
NVD-CWE-noinfo
|
CVE-2018-11257
|
2024-11-21 12:43 |
2018-07-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|