|
246401
|
6.1 |
MEDIUM
Network
|
feed_statistics_project
|
feed_statistics
|
The Feed Statistics plugin before 4.0 for WordPress has an Open Redirect via the feed-stats-url parameter.
|
CWE-601
Open Redirect
|
CVE-2018-17074
|
2024-11-21 12:53 |
2018-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246402
|
7.5 |
HIGH
Network
|
bitmap_project
|
bitmap
|
wernsey/bitmap before 2018-08-18 allows a NULL pointer dereference via a 4-bit image.
|
CWE-476
NULL Pointer Dereference
|
CVE-2018-17073
|
2024-11-21 12:53 |
2018-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246403
|
9.8 |
CRITICAL
Network
|
json\+\+_project
|
json\+\+
|
JSON++ through 2016-06-15 has a buffer over-read in yyparse() in json.y.
|
CWE-125
Out-of-bounds Read
|
CVE-2018-17072
|
2024-11-21 12:53 |
2018-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246404
|
6.5 |
MEDIUM
Network
|
unlcms
|
unlcms
|
An issue was discovered in UNL-CMS 7.59. A CSRF attack can update the website settings via ?q=admin%2Fconfig%2Fsystem%2Fsite-information&render=overlay&render=overlay.
|
CWE-352
Origin Validation Error
|
CVE-2018-17070
|
2024-11-21 12:53 |
2018-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246405
|
6.5 |
MEDIUM
Network
|
unlcms
|
unlcms
|
An issue was discovered in UNL-CMS 7.59. A CSRF attack can create new content via ?q=node%2Fadd%2Farticle&render=overlay&render=overlay.
|
CWE-352
Origin Validation Error
|
CVE-2018-17069
|
2024-11-21 12:53 |
2018-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246406
|
9.8 |
CRITICAL
Network
|
dlink
|
dir-816_a2_firmware
|
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/Diagnosis route. This could lead…
|
CWE-78
OS Command
|
CVE-2018-17068
|
2024-11-21 12:53 |
2018-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246407
|
9.8 |
CRITICAL
Network
|
dlink
|
dir-816_a2_firmware
|
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. A very long password to /goform/formLogin could lead to a stack-based buffer overflow and overwrite the return address.
|
CWE-787
Out-of-bounds Write
|
CVE-2018-17067
|
2024-11-21 12:53 |
2018-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246408
|
9.8 |
CRITICAL
Network
|
dlink
|
dir-816_a2_firmware
|
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction in the handler function of the /goform/form2systime.cgi route. This cou…
|
CWE-78
OS Command
|
CVE-2018-17066
|
2024-11-21 12:53 |
2018-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246409
|
9.8 |
CRITICAL
Network
|
dlink
|
dir-816_a2_firmware
|
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/DDNS route, a very long password could lead to a stack-based buffer overflow and overwrite th…
|
CWE-787
Out-of-bounds Write
|
CVE-2018-17065
|
2024-11-21 12:53 |
2018-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246410
|
9.8 |
CRITICAL
Network
|
dlink
|
dir-816_a2_firmware
|
An issue was discovered on D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/sylogapply route. This could…
|
CWE-78
OS Command
|
CVE-2018-17064
|
2024-11-21 12:53 |
2018-09-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|